ProHoster > Blog

Category: Blog

Blog Section

Critical vulnerability in the WordPress plugin wpDiscuz, which has 80,000 installations

Posted on

A dangerous vulnerability has been discovered in the WordPress plugin wpDiscuz, which is installed on over 80,000 sites. This flaw allows anyone to upload any file to the server without authentication, including PHP files, thereby executing their code on the server. Versions affected are from 7.0.0 to 7.0.4 inclusive. The vulnerability has been fixed in release 7.0.5. The wpDiscuz plugin allows the use of AJAX for […]

Release of the Apache Hadoop 3.3 data processing platform

Posted on

After a year and a half of development, the Apache Software Foundation has released Apache Hadoop 3.3.0, a free platform designed for distributed processing of large volumes of data using the map/reduce paradigm, which divides tasks into many smaller, isolated fragments, each of which can be executed on a separate node of the cluster. A Hadoop-based storage can scale across thousands of nodes and […]

Release Wine 5.14

Posted on

An experimental release of the open implementation of WinAPI — Wine 5.14 — has taken place. Since the release of version 5.13, 26 bug reports have been closed and 302 changes made. The most significant changes include: Continued restructuring support for the console. An initial version of the Webdings font has been proposed. The conversion of MSVCRT libraries to PE format has begun. Bug reports related to the operation of games and applications have been closed: […]

Debian 10.5 update

Posted on

The fifth corrective update for the Debian 10 distribution has been released, which includes accumulated package updates and fixes in the installer. The release contains 101 updates addressing stability issues and 62 updates addressing vulnerabilities. Among the changes in Debian 10.5 is the fix for a vulnerability in GRUB2 that allows bypassing the UEFI Secure Boot mechanism and enables the installation of unverified malicious software. […]

Tales from the Duty Crypt

Posted on

Preliminary notification: this post is strictly a Friday one and more entertaining than technical. You can expect fun stories about engineering mishaps, tales from the dark side of working with a mobile operator, and other lighthearted anecdotes. If I embellish any details, it’s only for the sake of storytelling, and if I lie, those incidents are from long ago, so it won't matter to anyone. […]

The wayland-utils package 1.0.0 has been released

Posted on

The developers of Wayland have introduced the first release of the new package wayland-utils, which will include utilities related to Wayland, similar to how the wayland-protocols package provides additional protocols and extensions. Currently, it includes only one utility, wayland-info, designed to display information about the Wayland protocols supported by the current composite server. The utility stands alone […]

Vulnerabilities in the X.Org Server and libX11

Posted on

Two vulnerabilities have been identified in X.Org Server and libX11: CVE-2020-14347 — a lack of memory initialization when allocating buffers for pixmaps via the AllocatePixmap() call can lead to the X client leaking memory content from the heap when the X server is running with elevated privileges. This leak can be used to bypass address space layout randomization (ASLR). When combined with other vulnerabilities, this issue […]

Docker and everything, everything, everything.

Posted on

TL;DR: an overview guide comparing environments for running applications in containers. The capabilities of Docker and other similar systems will be discussed. A bit of history on where it all began. The first well-known method of isolating an application is chroot. The system call of the same name changes the root directory, thus ensuring that the program that called it has access only to the files within that directory. But […]

Today is System Administrator Day. Our congratulations!

Posted on

Every year on the last Friday of July, the world celebrates System Administrator Appreciation Day — a professional holiday for all those responsible for the reliable and uninterrupted functioning of servers, corporate networks, workstations, multi-user computer systems, databases, and other network services. This tradition was initiated by American IT specialist Ted Kekatos, who believed it was unfair that there was no significant day in the calendar for […]

Update JPype 1.0.2, a library for accessing Java classes from Python.

Posted on

A new release of the JPype 1.0.2 layer is now available, allowing full access for Python applications to Java class libraries. With JPype, specific Java libraries can be used from Python, creating hybrid applications that combine Java and Python code. Unlike Jython, the integration with Java is achieved not by creating a version of Python for the JVM, but through interaction […]

Release of system manager systemd 246

Posted on

After five months of development, the system manager systemd 246 has been released. The new version includes support for freezing units, the ability to verify the root disk image by digital signature, support for compressing logs and core dumps using the ZSTD algorithm, the ability to unlock portable home directories using FIDO2 tokens, support for unlocking Microsoft BitLocker partitions via /etc/crypttab, and the renaming of BlackList to DenyList. […]

systemd 246

Posted on

The well-known system manager for GNU/Linux has prepared another release numbered 246. In this version: automatic loading of security rules, AppArmor support for checking disk encryption in units with ConditionPathIsEncrypted=/AssertPathIsEncrypted=, support for checking environment variables ConditionEnvironment=/AssertEnvironment=, support for checking the digital signature of the partition (dm-verity) in .service units, and the ability to transmit keys and certificates through AF_UNIX sockets without the need for […]

« to the beginning 677 678 679 680 681 682 683 684 685 686 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster