You are here
News
CEO of AI Music Company Says People Don't Like Making Music
Read more of this story at Slashdot.
New York Starts Enforcing $15 Broadband Law That ISPs Tried To Kill
Read more of this story at Slashdot.
Euro-Cloud Anexia Moves 12,000 VMs Off VMware to Homebrew KVM Platform
Read more of this story at Slashdot.
Mastodon Announces Transition To Nonprofit Structure
Read more of this story at Slashdot.
EU Probes Apple's New App Store Fees
Read more of this story at Slashdot.
After Years of USB Word Salad, New Labels Strip Everything But the Speed
Read more of this story at Slashdot.
Microsoft Is Testing 45% M365 Price Hikes in Asia
Read more of this story at Slashdot.
Companies Deploy AI To Curb Hiring as 'Cost Avoidance' Gains Ground
Read more of this story at Slashdot.
Ghost Jobs Haunt Online Listings
Read more of this story at Slashdot.
Nvidia Snaps Back at Biden's 'Innovation-Killing' AI Chip Export Restrictions
Read more of this story at Slashdot.
FBI Chief Warns China Poised To Wreak 'Real-World Harm' on US Infrastructure
Read more of this story at Slashdot.
Sonos CEO Patrick Spence Steps Down After Disastrous App Launch
Read more of this story at Slashdot.
DSA-5843-1 rsync - security update
CVE-2024-12084
Simon Scannell, Pedro Gallegos and Jasiel Spelman discovered a heap-based buffer overflow vulnerability due to improper handling of attacker-controlled checksum lengths. A remote attacker can take advantage of this flaw for code execution.
CVE-2024-12085
Simon Scannell, Pedro Gallegos and Jasiel Spelman reported a flaw in the way rsync compares file checksums, allowing a remote attacker to trigger an information leak.
CVE-2024-12086
Simon Scannell, Pedro Gallegos and Jasiel Spelman discovered a flaw which would result in a server leaking contents of an arbitrary file from the client's machine.
CVE-2024-12087
Simon Scannell, Pedro Gallegos and Jasiel Spelman reported a path traversal vulnerability in the rsync daemon affecting the --inc-recursive option, which could allow a server to write files outside of the client's intended destination directory.
CVE-2024-12088
Simon Scannell, Pedro Gallegos and Jasiel Spelman reported that when using the --safe-links option, rsync fails to properly verify if a symbolic link destination contains another symbolic link with it, resulting in path traversal and arbitrary file write outside of the desired directory.
CVE-2024-12747
Aleksei Gorban "loqpa" discovered a race condition when handling symbolic links resulting in an information leak which may enable escalation of privileges.
Neuralink Implants Third Brain Chip. Plans '20 or 30' This Year, Eventually 'Blindsight' Devices
Read more of this story at Slashdot.
Oracle Won't Withdraw 'JavaScript' Trademark, Says Deno. Legal Skirmish Continues
Read more of this story at Slashdot.
Blue Origin Livestreams - But Postpones - Its First Orbital Rocket Launch
Read more of this story at Slashdot.
Blue Origin Livestreams What's Potentially Its First Orbital Rocket Launch
Read more of this story at Slashdot.
Starlink's Satellite Internet is Cheaper than Leading ISPs in Five African Countries
Read more of this story at Slashdot.
Will Nvidia Spark a New Generation of Linux PCs?
Read more of this story at Slashdot.
Britain Seeks to Build a Homegrown OpenAI Rival, Become a World Leader in AI
Read more of this story at Slashdot.
Pages
