WordPress 2.6.2 released for security reasons
Free blog software WordPress notifies of a security update in its 2.6.2 version.
The WordPress security breaches were discoverd by Stefan Esser. They are based partly on SQL column truncation and partly on the weakness of the mt_rand() function. These breaches are especially noticeable if open registration is allowed on the blog. An immediate WordPress upgrade is recommended for such blogs.
As the developers make clear in their announcement, it is possible in WordPress to reset another user's password. Taken alone this may be a mere annoyance to users, but combined with the weakness of the mt_rand() function there is a risk that the randomly generated password can be predicted. The discoverer of this security breach will release details soon. Possible other PHP applications are susceptible, according to the WordPress Blog. The project recommends a patch, but certainly an upgrade to 2.6.2 in case open user registration is enabled. The upgrade also includes a number of bug fixes.
Issue 222/2019
Buy this issue as a PDF
News
-
Black Hole Image Has an Open Source Connection
Two imaging libraries responsible for the image are fully open source.
-
Linux Mint Founder Calls for Better Developer Support
Usually cheerful Clement ‘Clem’ Lefebvre says he "hasn't enjoyed" this development cycle.
-
Software Freedom Conservancy Announces End to VMware Lawsuit
VMware agrees to remove the offending code in a future release.
-
Chef Goes All Open Source
The company behind the popular DevOps automation tool is releasing those proprietary add-ons built around the open source core.
-
SUSE Spins off from Parent Company
While IBM has acquired Red Hat, SUSE goes solo.
-
Gnome 3.32 Released
New release of the Gnu desktop comes with many improvements.
-
VMware Rolls Out Essential PKS
Virtualization vendor brings commercial support to upstream Kubernetes.
-
Linux 5.0 Is Here
Linus says don't get excited, but the new release contains some significant updates.
-
Kali Linux 2019.1 Released
The favorite Linux distro of Mr. Robot gets the first update of 2019.
-
Linux Foundation Releases a New Draft of OpenChain Spec
OpenChain provides a standard for open source compliance throughout the software supply chain.