WordPress 2.6.2 released for security reasons
Free blog software WordPress notifies of a security update in its 2.6.2 version.
The WordPress security breaches were discoverd by Stefan Esser. They are based partly on SQL column truncation and partly on the weakness of the mt_rand() function. These breaches are especially noticeable if open registration is allowed on the blog. An immediate WordPress upgrade is recommended for such blogs.
As the developers make clear in their announcement, it is possible in WordPress to reset another user's password. Taken alone this may be a mere annoyance to users, but combined with the weakness of the mt_rand() function there is a risk that the randomly generated password can be predicted. The discoverer of this security breach will release details soon. Possible other PHP applications are susceptible, according to the WordPress Blog. The project recommends a patch, but certainly an upgrade to 2.6.2 in case open user registration is enabled. The upgrade also includes a number of bug fixes.
Issue 33: Discover LibreOffice/Special Editions
Buy this issue as a PDF
News
-
Microsoft Goes Open Source with Web Browsers
The company will use Google Chromium web browser as the foundation for its next browser.
-
Canonical Launches MicroK8s
Deploy Kubernetes in a few seconds.
-
A New Raspberry Pi Board
The new board packs everything that you get in Raspberry Pi 3B+ in a smaller package.
-
OpenStack Foundation Changes Name of the OpenStack Summit
New event will be known as the Open Infrastructure Summit
-
Red Hat Enterprise Linux 8 Beta
The latest version strikes a balance between past and future.
-
System76 Announces a Line of US-Made PCs
Thelio series is available for pre-order and will ship in early December.
-
IBM Acquires Red Hat
IBM is acquiring Red Hat, the most successful open source company.
-
Fedora 29 and Ubuntu 18.10 Released
New releases focus on boot time, new hardware, and modular design.
-
Redis Labs Modules Forked
New Commons Clause license rider causes Debian and Fedora developers to fork Redis Labs modules.
-
Microsoft Offers its Patent Portfolio
The company ends its long war; vows to protect Linux.