|
Recently, a bug in glibc version 2.39 and older (CVE-2024-2961) was uncovered where a buffer overflow in character set conversions to the ISO-2022-CN-EXT character set can result in remote code execution. This specific buffer overflow in glibc is exploitable through PHP, which uses the iconv functionality in glibc to do character set conversions. Although the bug is exploitable in the context of the PHP Engine, the bug is not in PHP. It is also not directly exploitable remotely.There are numerous reports online with titles like "Mitigating the iconv Vulnerability for PHP (CVE-2024-2961)" or "PHP Under Attack". These titles are misleading as this is not a bug in PHP itself.Currently there is no fix for this issue, but there is a workaround described in GLIBC Vulnerability on Servers Serving PHP. It explains a way how to remove the problematic character set from glibc. Perform this procedure for every gconv-modules-extra.conf file that is available on your system.Additionally it is also good practice for applications to accept only specific charsets, with an allow-list.Some Linux distributions such as Debian, CentOS, and others, already have published patched variants of glibc. Please upgrade as soon as possible.Once an update is available in glibc, updating that package on your Linux machine will be enough to alleviate the issue. You do not need to update PHP, as glibc is a dynamically linked library.PHP users on Windows are not affected.There will therefore also not be a new version of PHP for this vulnerability. |
|
|
| |
Read More | Posted: April 24, 2024 | By: Wissen Schwamm
|
|
|
| |
|
DLSS 3.5 with Ray Reconstruction creates higher quality ray-traced images for intensive ray-traced games and apps. |
|
|
| |
Read More | Posted: April 24, 2024 | By: Wissen Schwamm
|
|
|
| |
|
Can machine learning help predict extreme weather events and climate change? Christopher Bretherton, senior director of climate modeling at the Allen Institute for Artificial Intelligence, or AI2, explores the technology’s potential to enhance climate modeling with AI Podcast host Noah Kravitz in an episode recorded live at the NVIDIA GTC global AI conference. Bretherton explains
Read Article
|
|
|
| |
Read More | Posted: April 24, 2024 | By: Wissen Schwamm
|
|
|
| |
|
To help customers make more efficient use of their AI computing resources, NVIDIA today announced it has entered into a definitive agreement to acquire Run:ai, a Kubernetes-based workload management and orchestration software provider. Customer AI deployments are becoming increasingly complex, with workloads distributed across cloud, edge and on-premises data center infrastructure. Managing and orchestrating generative
Read Article
|
|
|
| |
Read More | Posted: April 24, 2024 | By: Wissen Schwamm
|
|
|
| |
|
To address the shift to electric vehicles, increased semiconductor demand, manufacturing onshoring, and ambitions for greater sustainability, manufacturers are investing in new factory developments and re-engineering their existing facilities. These projects often run over budget and schedule, due to complex and manual planning processes, legacy technology infrastructure, and disconnected tools, data and teams. To address
Read Article
|
|
|
| |
Read More | Posted: April 24, 2024 | By: Wissen Schwamm
|
|
|
| |
|
NVIDIA announced today its acceleration of Microsoft’s new Phi-3 Mini open language model with NVIDIA TensorRT-LLM, an open-source library for optimizing large language model inference when running on NVIDIA GPUs from PC to cloud. Phi-3 Mini packs the capability of 10x larger models and is licensed for both research and broad commercial usage, advancing Phi-2
Read Article
|
|
|
| |
Read More | Posted: April 23, 2024 | By: Wissen Schwamm
|
|
|
| |
|
Whether they’re monitoring miniscule insects or delivering insights from satellites in space, NVIDIA-accelerated startups are making every day Earth Day. Sustainable Futures, an initiative within the NVIDIA Inception program for cutting-edge startups, is supporting 750+ companies globally focused on agriculture, carbon capture, clean energy, climate and weather, environmental analysis, green computing, sustainable infrastructure and waste
Read Article
|
|
|
| |
Read More | Posted: April 22, 2024 | By: Wissen Schwamm
|
|
|
| |
|
Kicking off with Earth Day, this first article in a three-part series invites readers to learn how Logitech’s design innovation |
|
|
| |
Read More | Posted: April 21, 2024 | By: Wissen Schwamm
|
|
|
| |
|
Offering trial versions of applications is a common strategy to attract users by allowing them to evaluate the software before purchasing. However, designing a secure and user-friendly trial functionality can be challenging. [...] |
|
|
| |
Read More | Posted: April 19, 2024 | By: Wissen Schwamm
|
|
|
| |
|
Digital Signing should be a formality for professionals. It’s been almost 30 years since the first software was digitally signed but we still have many users who don’t know how or why they should use a code signing certificate. We need it to protect their intellectual property and enhance the cybersecurity of their end-users. [...] |
|
|
| |
Read More | Posted: April 19, 2024 | By: Wissen Schwamm
|
|
|
| |
|
NVIDIA today recognized 18 partners in Europe, the Middle East and Africa for their achievements and commitment to driving AI adoption. The recipients were honored at the annual EMEA Partner Day hosted by the NVIDIA Partner Network (NPN). The awards span seven categories that highlight the various ways partners work with NVIDIA to transform the
Read Article
|
|
|
| |
Read More | Posted: April 18, 2024 | By: Wissen Schwamm
|
|
|
| |
|
|
