Bash Shellshock vulnerability – PATCHED
As explained last time the media got all excited by a security vulnerability; proactive security patching is all in a days work here at Layershift. So it shouldn’t come as any great surprise that we were once again all over this as soon as the appropriate patches were released by the relevant upstreams.
Two separate patches were issued in respect of this vulnerability, and they even have two separate CVE references for the pleasure: CVE-2014-6271 and CVE-2014-7169.
Timeline
This widely reported vulnerability was first publicised late on Wednesday afternoon, 24th September 2014, with patches provided and installed later that day / overnight. However, that first patch was found to be incomplete – alas CVE-2014-7169 was born!
Early on Friday morning, 26th September 2014, a new patch was issued, and once again our engineers have worked tirelessly to get it deployed across all of our platforms in short order.
Shellshock patch status
- Managed Cloud VPS – PATCHED
- Jelastic PaaS – PATCHED
- Managed dedicated – PATCHED
- Shared hosting – PATCHED
- Internal infrastructure – PATCHED
Transfer the environment not just the project
At Layershift we’re always looking for new ways to help you to be more efficient and productive. After all, Jelastic is the PaaS for people aiming for success; you don’t get to be successful by wasting your time repeating your work or grappling with awkward configurations!
We received lots of great feedback (thanks!) following the recent overhaul of our environment collaboration feature – allowing you to get the whole team working within 1 Jelastic account, and sharing individual environments with appropriate team members.
You told us loud and clear that it’s immensely helpful to have this convenient way to temporarily share an environment with a freelancer or agency. But, you said, what about when the freelancer starts the project off on the Jelastic platform and wants to hand ownership over to his client at the end? There should be a good way to handle that situation…
Well yes, we completely agree. Here it is!
A .cool .ninja .guru .rocks
Four great new domain extensions you can register now with Layershift.
Starting today we’re offering .guru, .ninja, .rocks and .cool domain name registration in our store!
These new TLDs give you the opportunity to send your message in a more targeted and fun way than before: on each side of the dot there is a powerful word. If you’re a security expert, you can say it loud with security.guru or be a plumbing.ninja! Or perhaps you just want to recall your Gaelic roots with sham.rocks?
Each of these domains offer a fresh new namespace where you’re more likely to get that killer name before anyone else, so you can be the one receiving the admiring glances after coming up with the cunning rhyme or inspired prefix.
Step right up and register yours today at our domain store – as always, our domain registrations are offered at some of the lowest prices anywhere on the ‘net.
New .UK domains launched!
Get 2 years from us for the price of 1 year from our competitors!
.de, .fr, .gr, .nl and many more. Most countries in the world have a short, predictable and easy to remember domain extension, and now .UK is here!
This allows anyone to register a .UK domain in just the same way as you do with the other over 10 million existing UK domains like .co.uk. Unlike most of our competitors with inflated pricing for .UK domains (cost prices are the same as for .co.uk domains!) we’re keeping our usual low cost pricing for these new domains (just £2.95 or $4.95 per year).
Anyone who registered a domain ending in .co.uk, .org.uk, .me.uk etc. prior to 28 October 2013 may have an automatic first refusal right to the equivalent .UK domain until 2019. As the rules are complicated, we recommend to use Nominet’s .UK domain lookup tool.
As with all ccTLD’s, a UK contact address will be required for .UK (even if you’re based overseas), so make sure you submit the correct information when you register your new domain name.
Layershift Jelastic PaaS – unlimited edition
Hate trials that are so limited they’re effectively “crippleware”? Yeah, so do we! Sadly a few budding trialists brought it to our attention that we’re guilty of this heinous crime – today we’re putting that right.
The Jelastic PaaS is a polyglot platform, supporting applications authored in a variety of programming languages, and running a wide selection of application and database servers.
With this power comes great responsibility. A responsibility to set the resource limits high enough to suit a vast assortment of different technologies, frameworks, and server stacks. It turns out that some of your apps (particularly Java EE apps) are heavily performance limited – or may not run at all – with our old trial limits.