Preface: GdkPixbuf is a library with a long history, and it has been incrementally modified over years, so it may retain some older coding practices alongside newer ones. Background: GdkPixbuf is a library that loads image data in various formats and stores it as linear buffers in memory. The buffers can then be scaled, composited,modified,…

Preface: jQuery is an independent JavaScript library which brings along added functions and additional functionality to the standard built-in objects to what JavaScript natively provides. The programming crowd with jQuery still looks strong. According to w3techs stats. Popular sites are still using jQuery. Background: jQuery is the core library. jQueryUI is built on top of…

Preface: Common JUNOS daemons include: The routing protocol daemon (rpd) handles all routing protocol messages and routing table updates and implements routing policies. rpd contains modules that each function independently while sharing information with the others. The device control daemon (dcd) manages all interface devices and configurations. This daemon sends configurations to the kernel to…

Preface: Oracle Database 19c is the current long term release, and it provides the highest level of release stability and longest time-frame for support and bug fixes. Oracle Database 21c, also available for production use today as an innovation release, provides an early insight into the many enhancements and new capabilities. Background: Use the CREATE…

Preface: A growing number of Chinese chip design firms have adopted open-source RISC-V in their chip designs as an alternative to Intel’s proprietary X86 and Arm’s architecture, in a bid to minimise potential damage from US sanctions and to save on licensing fees. Background: If you still remember? The RISC System/6000 (RS/6000) is a family…

Preface: A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Furthermore, NULL pointer dereference issues can occur through a number of flaws including race conditions. Background: D-Bus is an inter-process communication (IPC) mechanism initially designed to replace the…

Preface: Server-side request forgery (SSRF) is a web security vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location. Additionally, SSRF attacks against other backend systems are also an evasion path. Sometimes an SSRF risk rating is medium risk, so it goes unnoticed (contempt). Background: vCenter Server manages…

Preface: We known that so called vulnerability may be found few months or year ago. But zero-day vulnerability have different. A zero-day is a computer-software vulnerability previously unknown to those who should be interested in its mitigation, like the vendor of the target software. Because of it urgency, it need to announce or release the…

Preface: There is no limit according to the HTTP protocol itself, but implementations will have a practical upper limit. I have sent data exceeding 4 GB using POST to Apache, but some servers did have a limit of 4 GB at the time. Background: KubeEdge consumes less resources and provides both edge-cloud collaboration and device…

Preface: The use of the custom HTTP header “SOAP Action” for SOAP web services, and cookies, and E-tags, and … well, the list goes on. HTTP headers carry data used by applications and therefore should be considered a viable transport mechanism for malicious code. Background: CICS TX 11.1 offers an enhanced inbound SOAP XML web…