ProHoster > Blog

Category: Blog

Blog Section

The possibility of executing user code in kernel context has been identified and fixed in the futex system call.

Posted on

In the implementation of the system call futex (fast userspace mutex), the use of stack memory after release was discovered and eliminated. This, in turn, allowed an attacker to execute their code in the context of the kernel, with all the resulting security implications. The vulnerability was found in the error handler code. A fix for this vulnerability was released in the Linux mainline on January 28 and […]

The first public release of JingOS

Posted on

The first public release of the mobile-oriented operating system JingOS has been made, specifically for the JingPad C1, with mass production scheduled to begin in July 2021. The system is a fork of Ubuntu, coming with many qualities borrowed from Apple's iPad OS forked from KDE. A set of stock applications is also being developed, including a calendar, app store, PIM, voice memos, and […]

Critical vulnerability in libgcrypt 1.9.0

Posted on

On January 28, a 0-day vulnerability was discovered in the cryptographic library libgcrypt by Tavis Ormandy from Project Zero (a team of security specialists at Google looking for 0-day vulnerabilities). The vulnerability affects only version 1.9.0 (now renamed on the upstream FTP server to avoid accidental downloads). Due to incorrect assumptions in the code, a buffer overflow is possible, potentially leading to remote code execution. The overflow can […]

Release of EiskaltDC++ 2.4.1

Posted on

The stable release of EiskaltDC++ v2.4.1 has been published — a cross-platform client for Direct Connect and Advanced Direct Connect networks. Builds have been prepared for various Linux distributions, Haiku, macOS, and Windows. Maintainers of many distributions have already updated packages in the official repositories. Key changes since version 2.2.9, released 7.5 years ago: General Changes OpenSSL support >= 1.1.x has been added (support […]

Release of Vivaldi browser 3.6

Posted on

Today, the final version of the Vivaldi 3.6 browser built on the open Chromium core has been released. In the new release, the functionality of tab groups has been significantly changed — now, when switching to a group, an additional panel opens automatically, displaying all tabs in the group. If necessary, the user can pin the second panel for easier management of multiple tabs. Among other changes, there are […]

GitLab is discontinuing Bronze/Starter for $4 per month

Posted on

Existing Bronze/Starter clients will be able to continue using it at the current price until the end of their subscription and for another year after that. Then they must choose either a more expensive subscription or a free account with fewer features. If opting for a more expensive subscription, significant discounts are provided, allowing the price to gradually rise to the usual rate over three years. For example, Premium […]

Dotenv-linter has been updated to v3.0.0

Posted on

Dotenv-linter is an open-source tool for checking and fixing various issues in .env files, which serve for more convenient storage of environment variables within a project. The use of environment variables is recommended by the development manifesto 'The Twelve Factor App' – a set of best practices for building applications across any platform. Following this manifesto prepares your application for scaling, conveniently […]

Firefox 85

Posted on

Firefox 85 is now available. Graphics subsystem: WebRender is enabled on devices using the 'GNOME+Wayland+Intel/AMD graphics card' setup (except for 4K displays, support for which is expected in Firefox 86). Additionally, WebRender is enabled on devices using Iris Pro Graphics P580 (mobile Xeon E3 v5), which developers had overlooked, as well as on devices with Intel HD Graphics drivers version 23.20.16.4973 (this specific driver […]

Firefox 85 is now available. Graphics subsystem: WebRender

Posted on

The vulnerability lies in the ability of a remote attacker to access directories outside of those exported via NFS, through a READDIRPLUS call on the .. root of the exported directory. The vulnerability has been fixed in the kernel version 5.10.10 released on January 23, as well as in all other supported kernel versions updated on that day: commit fdcaa4af5e70e2d984c9620a09e9dade067f2620 Author: J. Bruce Fields Date: Mon Jan 11 […]

Microsoft has released an official Rust library for the Windows API

Posted on

The library is structured as a Rust crate under the MIT License, which can be used as follows: [dependencies] windows = '0.2.1' [build-dependencies] windows = '0.2.1' After that, in the build script build.rs, you can generate the modules needed for your application: fn main() { windows::build!( windows::data::xml::dom::* windows::win32::system_services::{CreateEventW, SetEvent, WaitForSingleObject} windows::win32::windows_programming::CloseHandle ); } Documentation on available modules is published at docs.rs. […]

Google is closing third-party access to the Chrome Sync API

Posted on

During an audit, Google discovered that some third-party products based on Chromium code use keys that allow access to certain Google APIs and services intended for internal use. Specifically, to google_default_client_id and google_default_client_secret. As a result, users can access their own Chrome Sync data (such as bookmarks) not only in […]

« to the beginning 606 607 608 609 610 611 612 613 614 615 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster