[월:] 2017년 02월

No Image

Windows 10 SDK Preview Build 15021 Released

2017-02-04 KENNETH 0

Windows 10 SDK Preview Build 15021 Released Today, we released a new Windows 10 Creators Update SDK Preview to be used in conjunction with Windows 10 Insider Preview (Build 15021 or greater). The Preview SDK is a pre-release and cannot be used in a production environment. Please only install the SDK on your test machine. The Preview SDK Build 15021 contains bug fixes and under development changes to the API surface area. If you are working on an application that you need to submit to the store, you should not install the preview. The Preview SDK can be downloaded from developer section on Windows Insider. For feedback and updates to the known issues, please see the developer forum.  For new feature requests, head over to our Windows Platform UserVoice. Things to note: The SDK will require Visual Studio 2017 Preview. You can download the Visual Studio 2017 [ more… ]

No Image

Windows Insider Creators Update February Bug Bash #winbugbash

2017-02-04 KENNETH 0

Windows Insider Creators Update February Bug Bash #winbugbash Hi everyone, This is Michael Fortin, Corporate VP for Windows and Devices Core Quality and Anita George, leader of the Bug Bash for the Windows and Devices Group. We would like to welcome the Windows Insiders to the February 2017 Windows 10 Creators Update Bug Bash. Today, Friday February 3rd, we start the Bug Bash both internally within Microsoft as well as with Windows Insiders. Thank you to all the Insiders that have participated in past Bug Bashes, and returning or new participants in this upcoming one. Your feedback is very valuable to us and helps shape Windows 10! As you enter your feedback, our developers will be busy working on fixing many of these issues over the next several weeks. The Bug Bash will conclude on Sunday February 11th, 11:59 PM [ more… ]

No Image

USN-3189-1: Linux kernel vulnerabilities

2017-02-03 KENNETH 0

USN-3189-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-3189-1 3rd February, 2017 linux, linux-raspi2, linux-snapdragon vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Summary Several security issues were fixed in the kernel. Software description linux – Linux kernel linux-raspi2 – Linux kernel for Raspberry Pi 2 linux-snapdragon – Linux kernel for Snapdragon Processors Details Mikulas Patocka discovered that the asynchronous multibuffer cryptographicdaemon (mcryptd) in the Linux kernel did not properly handle being invokedwith incompatible algorithms. A local attacker could use this to cause adenial of service (system crash). (CVE-2016-10147) Qidan He discovered that the ICMP implementation in the Linux kernel didnot properly check the size of an ICMP header. A local attacker withCAP_NET_ADMIN could use this to expose sensitive information.(CVE-2016-8399) Update instructions The problem can be corrected by updating your system to the following [ more… ]

No Image

USN-3189-2: Linux kernel (Xenial HWE) vulnerabilities

2017-02-03 KENNETH 0

USN-3189-2: Linux kernel (Xenial HWE) vulnerabilities Ubuntu Security Notice USN-3189-2 3rd February, 2017 linux-lts-xenial vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary Several security issues were fixed in the kernel. Software description linux-lts-xenial – Linux hardware enablement kernel from Xenial for Trusty Details USN-3189-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04LTS. This update provides the corresponding updates for the LinuxHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu14.04 LTS. Mikulas Patocka discovered that the asynchronous multibuffer cryptographicdaemon (mcryptd) in the Linux kernel did not properly handle being invokedwith incompatible algorithms. A local attacker could use this to cause adenial of service (system crash). (CVE-2016-10147) Qidan He discovered that the ICMP implementation in the Linux kernel didnot properly check the size of an ICMP header. A local attacker withCAP_NET_ADMIN could [ more… ]

No Image

USN-3190-1: Linux kernel vulnerabilities

2017-02-03 KENNETH 0

USN-3190-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-3190-1 3rd February, 2017 linux vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Summary Several security issues were fixed in the kernel. Software description linux – Linux kernel Details Mikulas Patocka discovered that the asynchronous multibuffer cryptographicdaemon (mcryptd) in the Linux kernel did not properly handle being invokedwith incompatible algorithms. A local attacker could use this to cause adenial of service (system crash). (CVE-2016-10147) It was discovered that a use-after-free existed in the KVM susbsystem ofthe Linux kernel when creating devices. A local attacker could use this tocause a denial of service (system crash). (CVE-2016-10150) Qidan He discovered that the ICMP implementation in the Linux kernel didnot properly check the size of an ICMP header. A local attacker withCAP_NET_ADMIN could use this to expose sensitive information.(CVE-2016-8399) Qian [ more… ]