http://www.saltos.net/portal/en/home.htm News channel for SaltOS en http://www.saltos.net/portal/en/ico/saltos_logo_rss.png http://www.saltos.net/portal/en/home.htm 60 RhinOS info@saltos.net info@saltos.net http://www.saltos.net/portal/en/tweets/97/published-new-saltos-release-r6600.htm - Updated the libraries:
  - pdf.js (JavaScript library)
  - Cookies (jQuery plugin)
  - PHPlot (PHP plugin)
  - Masonry (jQuery plugin)
  - Archive (PHP plugin)
  - TCPDF (PHP plugin)
  - Form (jQuery plugin)
  - WordPress (PHP plugin)
  - jQuery UI (jQuery library)
  - RFC822 addresses (PHP plugin)
  - Mime Parser (PHP plugin)
  - jQuery (Javascript base)
  - PHPMailer (PHP plugin)
  - PHPExcel (PHP plugin)
- Added the libraries:
  - EvalMath (PHP plugin)
  - jQuery Mobile (Javascript base)
  - html2text (PHP plugin)
  - Silk icones (Servidor plugins)
  - PHPass (PHP plugin)
  - Password Strength (PHP plugin)
- Removed the libraries:
  - PHPThumb (PHP plugin)
    - Jesus Camara found the CVE-2010-1598
    - The vulnerability was corrected in the release r5104
    - In the release r6194 the phpthumb library was eliminated in SaltOS
- Improvements to the database drivers (SQLite and MySQL)
- Improvements to the installer
- Integration of phplots improvements using maps
- Improved calculator widget (now does not require external binaries)
- Fixed several bugs reported by users
- Rewritten support for mobile devices (with jQuery Mobile)
- Tested on www.000webhost.com (now installed without using shell commands)
- Added a new icon theme (Silk is now the default theme)
- Emulation for pushstate, replacestate and onhashchange (useful for mobile devices based on Android)
- Improvements in the JS and CSS minification
- Fixed a bug that affects some applications with the Catalan translation
- Added support for correcting the problem of max_input_vars
- Added support for selectable text in the PDF viewer
- Added support for using priority and sensitivity in the emails
- Replaced the SHA1 by BCrypt in passwords (to avoid dictionary attacks)
- Added password strength indicator
- Added support to PHP 5.4
- Fixed a security bug (PHPExcel vulnerability announded by Stefan Schurtz)
- Added support to MariaDB (replacement for MySQL very much efficient and faster)
- Added file indexing (to allow search in the contents of uploaded files and attachments)
- Added support for RTL to allow new languages as Arabic.
- Added the Arabic language of Saudi Arabia.
- Improvements in the setup wizard.
- Added some example data (thanks to www.generatedata.com)]]> Wed, 15 May 2013 21:56:00 GMT http://www.saltos.net/portal/en/tweets/97 http://www.saltos.net/portal/en/tweets/96/published-the-new-site-of-the-saltos-project.htm Mon, 15 Apr 2013 22:32:00 GMT http://www.saltos.net/portal/en/tweets/96 http://www.saltos.net/portal/en/tweets/95/mariadb-replaces-mysql-in-arch-linux-repositories.htm https://www.archlinux.org/news/mariadb-replaces-mysql-in-repositories/]]> Mon, 25 Mar 2013 21:04:00 GMT http://www.saltos.net/portal/en/tweets/95 http://www.saltos.net/portal/en/tweets/94/longest-running-linux-distribution-slackware-adopts-mariadb.htm http://linux.slashdot.org/story/13/03/24/1625240/longest-running-linux-distribution-slackware-adopts-mariadb]]> Sun, 24 Mar 2013 17:46:00 GMT http://www.saltos.net/portal/en/tweets/94 http://www.saltos.net/portal/en/tweets/93/another-interesting-read-about-the-of-free-software-and-the-gratis-concept.htm http://felixge.de/2013/03/07/open-source-and-responsibility.html]]> Thu, 07 Mar 2013 16:01:00 GMT http://www.saltos.net/portal/en/tweets/93 http://www.saltos.net/portal/en/tweets/92/interesting-reading-about-the-php-language.htm http://blog.samuellevy.com/post/41-php-is-the-right-tool-for-the-job-for-all-the-wrong-reasons.html]]> Thu, 07 Mar 2013 13:38:00 GMT http://www.saltos.net/portal/en/tweets/92 http://www.saltos.net/portal/en/tweets/91/saltos-is-translated-into-arabic-and-adds-support-for-rtl-languages.htm Mon, 25 Feb 2013 20:06:00 GMT http://www.saltos.net/portal/en/tweets/91 http://www.saltos.net/portal/en/tweets/90/one-year-of-free-hosting-for-saltos-net-by-dinahosting.htm Sat, 26 Jan 2013 22:41:00 GMT http://www.saltos.net/portal/en/tweets/90 http://www.saltos.net/portal/en/tweets/89/red-hat-developers-are-planning-to-replace-mysql-with-mariadb-in-fedora-19.htm http://linux.slashdot.org/story/13/01/22/033201/fedora-19-nixing-mysql-in-favor-of-mariadb]]> Tue, 22 Jan 2013 12:19:00 GMT http://www.saltos.net/portal/en/tweets/89 http://www.saltos.net/portal/en/tweets/88/network-world-tested-6-free-databases-mariadb-wins-the-test.htm http://www.networkworld.com/reviews/2012/120312-databases-test-263922.html]]> Sun, 09 Dec 2012 21:01:00 GMT http://www.saltos.net/portal/en/tweets/88 http://www.saltos.net/portal/en/tweets/87/the-mariadb-site-adds-saltos-in-their-case-studies.htm http://kb.askmonty.org/en/saltos-sees-gains-with-subqueries-in-mariadb/]]> Thu, 27 Sep 2012 07:36:00 GMT http://www.saltos.net/portal/en/tweets/87 http://www.saltos.net/portal/en/tweets/86/i-recomend-to-use-mariadb-instead-of-mysql.htm Why use MariaDB instead of MySQL?]]> Thu, 13 Sep 2012 00:44:00 GMT http://www.saltos.net/portal/en/tweets/86 http://www.saltos.net/portal/en/tweets/85/exploit-found.htm
As I don't know how contact with he because he doesn't add a real email, I want ask to he: are you a programmer?, have you made some contribution to society?, I consider your email as prepotent.]]> Fri, 24 Aug 2012 07:28:00 GMT http://www.saltos.net/portal/en/tweets/85 http://www.saltos.net/portal/en/tweets/84/saltos-runs-without-problems-on-php-5-4.htm Sun, 29 Jul 2012 21:32:00 GMT http://www.saltos.net/portal/en/tweets/84 http://www.saltos.net/portal/en/tweets/83/i-moved-the-demonstration-environment-to-my-personal-server.htm Sun, 15 Jul 2012 19:17:00 GMT http://www.saltos.net/portal/en/tweets/83 http://www.saltos.net/portal/en/tweets/82/now-you-can-download-the-nightly-version-of-saltos.htm http://sourceforge.net/projects/saltos/files/nightly/]]> Sat, 30 Jun 2012 13:08:00 GMT http://www.saltos.net/portal/en/tweets/82 http://www.saltos.net/portal/en/tweets/81/incredible-response-of-the-jsmin-library-developer.htm https://github.com/rgrove/jsmin-php/issues/14]]> Thu, 14 Jun 2012 14:18:00 GMT http://www.saltos.net/portal/en/tweets/81 http://www.saltos.net/portal/en/tweets/80/i-am-preparing-a-nightly-version-of-saltos.htm Sun, 10 Jun 2012 23:03:00 GMT http://www.saltos.net/portal/en/tweets/80 http://www.saltos.net/portal/en/tweets/79/the-abcustom-company-has-given-me-a-quiet-office-to-work-in-peace.htm Tue, 22 May 2012 21:55:00 GMT http://www.saltos.net/portal/en/tweets/79 http://www.saltos.net/portal/en/tweets/78/detected-security-vulnerability-in-rhinos.htm - HSV-2012-0005
Time Line:
- Detection Date: 22/03/2012
- Notification Date: 22/03/2012
- Fix Date: 22/03/2012
- Disclosure Date: 22/03/2012
Name:
- Arbitary File Download in RhinOS v3.0
Afected Versions:
- SaltOS v3.0 r1238 and previous
References:
- CVE ID: N/A
- Bugtraq ID: N/A
- OSVDB ID: N/A
Descriptión:
- Authenticated users can download any file from the server where RhinOS is instaled
POC / Exploit:
- http://www.example.com/admin/inicio.php?include=php/download.php&name=passwd.txt&file=/etc/passwd
Solution:
- Update the version of RhinOS v3.0 to r1247 or later]]> Thu, 22 Mar 2012 17:34:00 GMT http://www.saltos.net/portal/en/tweets/78