Garming Sam reported an out-of-bounds read in the ldb_wildcard_compare() function of ldb, a LDAP-like embedded database, resulting in denial of service.
Comment
Update to 1.0.7 Fixes related to CVE-2019-5736.
Strengthening connections with our users is a huge part of the work that we do on the Community Team here at cPanel, and conferences like JoomlaDay Florida are perfect for that. Even on years that it sells out (like this one), it’s only around 150 of our best friends with great chances to interact, and still intimate enough that we get a chance to really talk to some of the best folks there. I …
Several security issues were fixed in GD.
In the February 2019 survey we received responses from 1,477,803,927 sites, 229,586,773 unique domains, and 8,366,753 web-facing computers. This reflects a loss of 40.4 million sites, and gains of 979k domains, and 157k web-facing computers.
Microsoft experienced the largest gain in domains this month, with a net increase of just over one million. Despite several months of relatively small fluctuating gains and losses, the number of domains running Microsoft server software is on a general upward trend. Its total now stands at 59.3 million domains, up by just under 2.6 million (+4.6%) since this time last year. However, this strong domain growth was not reflected in any other metric this month – Microsoft gained only 478 web-facing computers, made losses both in active sites and within the top million sites, and suffered a sizable loss of 65 million hostnames.
On 20 February, Microsoft published a security advisory regarding a potential denial of service vulnerability in IIS. It can be exploited by sending specially crafted HTTP/2 requests to a Microsoft IIS web server, causing CPU usage to spike to 100% until the malicious connections are killed by IIS. Microsoft has addressed this issue in February’s “non-security” update by providing the ability to define limits on the number of HTTP/2 settings parameters allowed over a connection.
nginx’s growth in the domains metric was some way behind Microsoft’s this month, with an increase of 622k. nginx’s current total of 52.6 million domains represents a growth of over 8.6 million domains (+19.1%) since February 2018 – over three times that of Microsoft – however, its market share has remained just under 3 percentage points behind Microsoft’s since April 2018. In terms of web-facing computers, nginx experienced the largest increase (+102k), continuing its steady gains in market share. It now holds a 29.0% share of the web-facing computer market with a total of 2.4 million.
The latest version of nginx (1.15.9 mainline) was released on 26 February, with some small changes including two new features and two bug fixes. Another product in the nginx family, NGINX Unit 1.7.1, was also released in February to address a security vulnerability in its router process. NGINX Unit is a lightweight web application server that can serve sandboxed Go, Perl, PHP, Python, Ruby and – soon – Java applications.
Apache is still losing domains, with a decrease of 216k this month, and 7.3 million domains over the past year. Apache is also gradually losing market share in terms of web-facing computers, despite an overall increase in the number of public web servers using it: this month, Apache gained 32.9k web-facing computers, taking its total up to 3.2 million, while competitor growth caused its market share to fall to 38.04%. The latest version, Apache 2.4.38, was released on 22 January. This release in the 2.4.x stable branch is regarded as the best available version of Apache, and includes three security fixes and multiple bug fixes.
| Developer | January 2019 | Percent | February 2019 | Percent | Change |
|---|---|---|---|---|---|
| Microsoft | 485,175,885 | 31.96% | 419,972,039 | 28.42% | -3.54 |
| Apache | 323,398,866 | 21.30% | 386,522,266 | 26.16% | 4.85 |
| nginx | 375,594,875 | 24.74% | 374,544,606 | 25.34% | 0.61 |
| 23,982,033 | 1.58% | 23,912,250 | 1.62% | 0.04 |
| Developer | January 2019 | Percent | February 2019 | Percent | Change |
|---|---|---|---|---|---|
| Apache | 56,252,197 | 30.88% | 56,114,503 | 30.99% | 0.11 |
| nginx | 36,066,109 | 19.80% | 35,488,486 | 19.60% | -0.20 |
| 14,878,955 | 8.17% | 14,863,876 | 8.21% | 0.04 | |
| Microsoft | 11,525,920 | 6.33% | 11,251,992 | 6.21% | -0.11 |
For more information see Active Sites
| Developer | January 2019 | Percent | February 2019 | Percent | Change |
|---|---|---|---|---|---|
| Apache | 328,507 | 32.85% | 324,731 | 32.47% | -0.38 |
| nginx | 259,107 | 25.91% | 261,255 | 26.13% | 0.21 |
| Microsoft | 91,362 | 9.14% | 90,263 | 9.03% | -0.11 |
| LiteSpeed | 16,285 | 1.63% | 16,699 | 1.67% | 0.04 |
| Developer | January 2019 | Percent | February 2019 | Percent | Change |
|---|---|---|---|---|---|
| Apache | 3,149,796 | 38.37% | 3,182,725 | 38.04% | -0.33 |
| nginx | 2,323,623 | 28.30% | 2,425,607 | 28.99% | 0.69 |
| Microsoft | 1,548,724 | 18.86% | 1,549,202 | 18.52% | -0.35 |
| Developer | January 2019 | Percent | February 2019 | Percent | Change |
|---|---|---|---|---|---|
| Apache | 74,190,745 | 32.45% | 73,975,137 | 32.22% | -0.23 |
| Microsoft | 58,222,395 | 25.47% | 59,315,216 | 25.84% | 0.37 |
| nginx | 51,932,497 | 22.72% | 52,554,623 | 22.89% | 0.17 |
| 2,094,383 | 0.92% | 2,120,328 | 0.92% | 0.01 |