2015년 07월 – 지락문화예술공작단

WordPress 4.3 Release Candidate

2015-07-30 KENNETH 0

The release candidate for WordPress 4.3 is now available. We’ve made more than 100 changes since releasing Beta 4 a week ago. RC means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. We hope to ship WordPress 4.3 on Tuesday, August 18, but we need your help to get there. If you haven’t tested 4.3 yet, now is the time! Think you’ve found a bug? Please post to the Alpha/Beta support forum. If any known issues come up, you’ll be able to find them here. To test WordPress 4.3 RC1, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip). For more information about what’s new in version 4.3, check out the Beta 1, Beta 2, Beta 3, and Beta 4 blog [ more… ]

XE 1.8.7 RELEASE

2015-07-23 KENNETH 0

출처 : https://www.xpressengine.com/devlog/23047198 XE-1.8.7 버전이 업데이트 되었습니다. 이 버전은 1.8.6에서 발생하는 확장변수 관련 문제와 IE8에서의 파일첨부 기능의 문제를 해결합니다. 라고 되어있습니다. 다운로드 및 변경내역 정리 http://www.xpressengine.com/?mid=download&package_srl=18325662

openssl Alternative chains certificate forgery (CVE-2015-1793)

2015-07-22 KENNETH 0

출처 : http://openssl.org/news/secadv_20150709.txt 엇.. 언제 이런 이슈가 나왔지??? 하고 뒤늦게 알게 된후.. centos6 centos7 모두 업데이트 기록을 조사해 봤으나 관련 이슈로 업데이트 된 기록이 없음.. 자세히 살펴보니 1.0.2c, 1.0.2b, 1.0.1n, 1.0.1o 이렇게 4가지 버전만 해당된다고… 다행인지 centos는 해당 버전을 사용하지 않기 때문에 비껴감.. ㅋㅋㅋ 원문 OpenSSL Security Advisory [9 Jul 2015] ======================================= Alternative chains certificate forgery (CVE-2015-1793) ====================================================== Severity: High During certificate verification, OpenSSL (starting from version 1.0.1n and 1.0.2b) will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use a valid leaf certificate to act as a CA and “issue” an invalid certificate. This issue will impact any [ more… ]

eAccelerator 설치 및 연동

2015-07-21 KENNETH 0

1. 다운로드 공식사이트 : http://eaccelerator.net 다운로드페이지 : https://github.com/eaccelerator/eaccelerator/tarball/master (2015/07/20 기준) 메뉴얼 : https://github.com/eaccelerator/eaccelerator/wiki 2. 설치 wget https://github.com/eaccelerator/eaccelerator/tarball/master tar zxvpf eaccelerator*tar.gz cd eaccelerator-* phpize ./configure –enable-shared –with-php-config=/usr/local/bin/php-config make cp modules/eaccelerator.so /usr/local/lib/php/extensions/ 3. 설정 php.ini 파일에 아래내용 추가 (extension_dir = “/usr/local/lib/php/extensions” 상황을 가정함) extension=eaccelerator.so eaccelerator.shm_size=”16″ eaccelerator.cache_dir=”/tmp/eaccelerator” eaccelerator.enable=”1″ eaccelerator.optimizer=”1″ eaccelerator.check_mtime=”1″ eaccelerator.debug=”0″ eaccelerator.filter=”” eaccelerator.shm_ttl=”0″ eaccelerator.shm_prune_period=”0″ eaccelerator.shm_only=”0″ 4. 디렉토리 생성 원래는 eaccelerator.cache_dir 항목에 설정해준 디렉토리를 생성하라고 설명되어 있으나.. 내가 설치했던 42067ac (출력버넌 1.0-dev)버전에서는 디렉토리를 생성하지 않아도 아파치 재시작후 알아서 생성되는것을 확인할 수 있었다. * 디렉토리 구조 # ls -al /tmp/eaccelerator/99/ total 72 drwx—— 18 nobody nobody 4096 Jul 19 21:30 . drwxrwxrwx 3 root root 4096 Jul 19 21:30 .. drwx—— 18 nobody nobody 4096 Jul 19 21:30 0 drwx—— 18 nobody nobody 4096 Jul 19 21:30 1 drwx—— 18 nobody nobody 4096 Jul 19 21:30 2 drwx—— 18 nobody nobody 4096 Jul 19 21:30 3 drwx—— 18 [ more… ]

Out-of-band release for Security Bulletin MS15-078

2015-07-21 KENNETH 0

Today, we released a security bulletin to provide an update for Microsoft Windows. Customers who have automatic updates enabled or apply the update, will be protected. We recommend customers apply the update as soon as possible, following the directions in the security bulletin. More information about this bulletin can be found at Microsoft’s Bulletin Summary page. MSRC Team Source: ms-msrc