WordPress 2.6.2 released for security reasons
Free blog software WordPress notifies of a security update in its 2.6.2 version.
The WordPress security breaches were discoverd by Stefan Esser. They are based partly on SQL column truncation and partly on the weakness of the mt_rand() function. These breaches are especially noticeable if open registration is allowed on the blog. An immediate WordPress upgrade is recommended for such blogs.
As the developers make clear in their announcement, it is possible in WordPress to reset another user's password. Taken alone this may be a mere annoyance to users, but combined with the weakness of the mt_rand() function there is a risk that the randomly generated password can be predicted. The discoverer of this security breach will release details soon. Possible other PHP applications are susceptible, according to the WordPress Blog. The project recommends a patch, but certainly an upgrade to 2.6.2 in case open user registration is enabled. The upgrade also includes a number of bug fixes.
Issue 224/2019
Buy this issue as a PDF
News
-
Raspberry Pi 4 Is Here
A new operating system has been released to support the new device.
-
Ubuntu Takes A U-Turn with 32-Bit Support
Canonical will continue to support legacy applications and libraries.
-
Chromium-Based Browsers Will Ignore Google’s Ad-Blocking Ban
Brave Opera and Vivaldi will not implement Google’s changes that will cripple ad-blockers.
-
Zorin OS 15 Released
The new release is based on Ubuntu 18.04 LTS.
-
Ubuntu to Package Proprietary Nvidia Driver
Canonical is making it easier for users to install proprietary Nvidia drivers.
-
openSUSE Leap 15.1 Released
Better hardware support.
-
Red Hat Enterprise Linux 8 Available
An OS redesigned for the hybrid cloud era.
-
Google Brings Linux to Chromebook
All new Chromebooks will be capable of running Linux.
-
Fedora Project Announces Fedora 30
The latest version comes with new tools and a new alignment of the various Fedora editions.
-
The Apache Software Foundation Completes Migration To GitHub
The foundation has decommissioned its own Git service.