2015년 09월 – 지락문화예술공작단

만들면서 배우는 Git+GitHub 입문

2015-09-26 KENNETH 0

만들면서 배우는 Git+GitHub 입문 (제목중 ”Git+GitHub”의 ”+” 기호는 한빛 홈페이지서 보고 적음) 저자 : 윤웅식 출판사 : 한빛미디어 책정보 : http://hanbit.co.kr/book/look.html?isbn=978-89-6848-202-1 트랙백 : http://www.hanbit.co.kr/trackback/978-89-6848-202-1 ”내가 과연 이 책을 볼 필요가 있는가..?” 당연하지만 최우선순위 대상은 ”개발자”다. 그리고 나는 ”개발자”가 아니다.. ;;;;; 추가로 ”웹 디자이너”도 아니다. 단지 ”모든 사람”의 범주에 포함될뿐 그냥 ”사람”이니까… 그리고 내가 활용하는 s/w 들 상당수가 github 를 통해서 배포되니까.. 라면서 굳이 정당성을 부여해 본다. ”이 책을 읽고 무엇을 얻고자 하는가?” * 기본적인 git 명령어 사용법 * github 활용법 대략 이정도.. 때문에 ”PART II”의 IDE별 git 활용법 부분은 이클립스환경에서만 대략 구성 해보고, 나머지는 책만 보는 형태로 진행했다. * 위의 2가지 때문에 굳이 책이 필요한가? 당연하다… 같은 내용이라도, ”예”를 들어 설명하는 내용은 ”영어”로 설명 되어 있는 것과 ”한글”로 설명 되어 있는 것은 다르다. IT용어와 같이 전문영역의 내용은 우리말로 설명해줘도 쉽지 않은 경우가 있는데.. 그나마 영어로 되어 있으면 내가 학습하려는 [ more… ]

MS15-101 – Important: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3089662) – Version: 1.1

2015-09-25 KENNETH 0

Severity Rating: ImportantRevision Note: V1.1 (September 25, 2015): Removed Windows Server Technical Preview 3 from the Affected Software table footnote because it is not affected by the vulnerabilities described in this security bulletin. This is an informational change only. Customers who have already successfully updated their systems do not need to take any action.Summary: This security update resolves vulnerabilities in Microsoft .NET Framework. The most severe of the vulnerabilities could allow elevation of privilege if a user runs a specially crafted .NET application. However, in all cases, an attacker would have no way to force users to run the application; an attacker would have to convince users to do so. Source: ms-security

MS15-092 – Important: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3086251) – Version: 1.2

2015-09-25 KENNETH 0

Severity Rating: ImportantRevision Note: V1.2 (September 25, 2015): Added a footnote to the Affected Software table to inform customers that Windows Server Technical Preview 2 is affected. Customers running this operating system are encouraged to apply the update, which is available via Windows Update.Summary: This security update resolves vulnerabilities in Microsoft .NET Framework. The vulnerabilities could allow elevation of privilege if a user runs a specially crafted .NET application. However, in all cases, an attacker would have no way to force users to run the application; an attacker would have to convince users to do so. Source: ms-security

WordPress 4.3.1 Security and Maintenance Release

2015-09-16 KENNETH 0

WordPress 4.3.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. This release addresses three issues, including two cross-site scripting vulnerabilities and a potential privilege escalation. WordPress versions 4.3 and earlier are vulnerable to a cross-site scripting vulnerability when processing shortcode tags (CVE-2015-5714). Reported by Shahar Tal and Netanel Rubin of Check Point. A separate cross-site scripting vulnerability was found in the user list table. Reported by Ben Bidner of the WordPress security team. Finally, in certain cases, users without proper permissions could publish private posts and make them sticky (CVE-2015-5715). Reported by Shahar Tal and Netanel Rubin of Check Point. Our thanks to those who have practiced responsible disclosure of security issues. WordPress 4.3.1 also fixes twenty-six bugs. For more information, see the release notes or consult the list of changes. Download WordPress 4.3.1 or venture over to Dashboard [ more… ]

September 2015 Security Update Release Summary

2015-09-09 KENNETH 0

Today we released security updates to provide protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security TechNet Library. MSRC Team Source: ms-msrc