Searching We.Love.Privacy.Club

Twts matching #0
Sort by: Newest, Oldest, Most Relevant

Prosodical Thoughts: Prosody 0.11.12 released
We are pleased to announce a new minor release from our stable branch.

This is a security release that addresses a denial-of-service vulnerability in
Prosody’s mod_websocket. For more information, refer to the
20220113 advisory.

A summary of changes in this release:

Security
  • util.xml: Do not allow doctypes, comments or processing instructions
Download

As usual, download instructions for many platforms can be f … ⌘ Read more

⤋ Read More

Ignite Realtime Blog: Openfire 4.6.7 released (Log4j 2.17.1 only change)
Openfire 4.6.7 has been released with only a single change to bump the bundled log4j library to version 2.17.1. Whilst we do not believe Openfire to be vulnerable to the CVEs associated with the log4j 2.17.0 and 2.17.1 releases, we realize that many folks are running naive security scanners that are simply checking for bundled jar versions.

The [changelog](https://download.igniterealtime.org/open … ⌘ Read more

⤋ Read More

Paul Schaub: PGPainless 1.0.0 Released!
Close to the end of 2021 I’m excited to announce the release of PGPainless version 1.0.0! After a series of release candidates, it is finally time to party! The OpenPGP library successfully underwent a security audit in late November and I feel like it finally reached a state of sufficient maturity to be worthy of a major release with a “1” at the front.

![](https://blog.jabberhead.tk/wp-content/uploads/2021/12/francesco- … ⌘ Read more

⤋ Read More

Prosodical Thoughts: Prosody 0.11.11 released
We are pleased to announce a new minor release from our stable branch.

This release contains some fixes to PEP to control memory usage, along
with a small batch of fixes for issues discovered since the last
release.

This will likely be the last release of the 0.11 branch.

A summary of changes in this release:

Fixes and improvements
  • net.server_epoll: Prioritize network events over timers to improve performance under heavy load
  • mod_p … ⌘ Read more

⤋ Read More

Ignite Realtime Blog: Openfire 4.6.6 and 4.5.5 releases (Log4j-only changes)
As we’re monitoring developments around the recent Log4j vulnerabilities, we’ve decided to provide another update for Openfire to pull in the latests available updates from Log4j.

Since the previous release, the Log4j team released a new version (2.16.0) of their library, that provides better protection against the original vulnera … ⌘ Read more

⤋ Read More

Apache Log4j 2 CVE-2021-44228
We know that many of you are working hard on fixing the new and serious Log4j 2 vulnerability CVE-2021-44228, which has a 10.0 CVSS score. We send our #hugops and best wishes to all of you working on this vulnerability, now going by the name Log4Shell. This vulnerability in Log4j 2, a very common Java […]

The post Apache Log4j 2 CVE-2021-44228 appeared first on Docker Blog. ⌘ Read more

⤋ Read More

Ignite Realtime Blog: Openfire 4.6.5 released
Although we’re preparing for the Openfire 4.7.0 release, the recently discovered vulnerability in the Apache Log4j utility prompted us to push an immediate release of Openfire to address that issue. This release, Openfire 4.6.5, is available now.

We urge you to update as soon as possible. If that’s not feasible, then we advise you to apply the documented workaround (in the form o … ⌘ Read more

⤋ Read More