2017년 08월 – 페이지 19 – 지락문화예술공작단

USN-3400-1: Augeas vulnerability

2017-08-22 KENNETH 0

USN-3400-1: Augeas vulnerability Ubuntu Security Notice USN-3400-1 21st August, 2017 augeas vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Augeas could be made to crash if it received specially crafted input. Software description augeas – Configuration editing tool Details It was discovered that Augeas incorrectly handled certain strings.An attacker could use this issue to cause Augeas to crash, leadingto a denial of service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: augeas-tools 1.6.0-0ubuntu3.1 libaugeas0 1.6.0-0ubuntu3.1 Ubuntu 16.04 LTS: augeas-tools 1.4.0-0ubuntu1.1 libaugeas0 1.4.0-0ubuntu1.1 Ubuntu 14.04 LTS: augeas-tools 1.2.0-0ubuntu1.3 libaugeas0 1.2.0-0ubuntu1.3 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2017-7555 [ more… ]

RHSA-2017:2493-1: Important: Red Hat JBoss Web Server 2 security update

2017-08-22 KENNETH 0

RHSA-2017:2493-1: Important: Red Hat JBoss Web Server 2 security update Red Hat Enterprise Linux: An update is now available for Red Hat JBoss Enterprise Web Server 2.1.2 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Web Server 2.1.2 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. CVE-2016-6304, CVE-2016-8610, CVE-2017-5647, CVE-2017-5664 Source: RHSA-2017:2493-1: Important: Red Hat JBoss Web Server 2 security update

Windows 10 Tip: Three ways to get started with OneNote

2017-08-22 KENNETH 0

Windows 10 Tip: Three ways to get started with OneNote OneNote is a great way to collect important information from various sources and organize it for reference later, from thoughts and ideas to homework, meetings, and more! Start by customizing your pens: Choose a personal set of pens, pencils, and highlighters for inking. Choose Draw, then click the Add Pen button and select your favorite tool. From here, you can also choose the size and color, including fun effects for the pen like Rainbow, Galaxy, Silver, and Gold. Easily organize your pen gallery by dragging and dropping tools in the ribbon. View multiple pages at once: You can also look at multiple pages at once by clicking the View tab, then New Window – or, just press CTRL + M. Check out the immersive reader: Immersive Reader boosts comprehension by [ more… ]

USN-3398-1: graphite2 vulnerabilities

2017-08-22 KENNETH 0

USN-3398-1: graphite2 vulnerabilities Ubuntu Security Notice USN-3398-1 21st August, 2017 graphite2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary graphite2 could be made to crash or run programs if it opened a specially crafted font. Software description graphite2 – Font rendering engine for Complex Scripts Details Holger Fuhrmannek and Tyson Smith discovered that graphite2 incorrectlyhandled certain malformed fonts. If a user or automated system were trickedinto opening a specially-crafted font file, a remote attacker could usethis issue to cause graphite2 to crash, resulting in a denial of service,or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: libgraphite2-3 1.3.10-0ubuntu0.17.04.1 Ubuntu 16.04 LTS: libgraphite2-3 1.3.10-0ubuntu0.16.04.1 Ubuntu 14.04 LTS: libgraphite2-3 1.3.10-0ubuntu0.14.04.1 To update your system, please [ more… ]

USN-3399-1: cvs vulnerability

2017-08-22 KENNETH 0

USN-3399-1: cvs vulnerability Ubuntu Security Notice USN-3399-1 21st August, 2017 cvs vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary cvs could be made run programs as your login if it opened a specially crafted cvs repository. Software description cvs – Concurrent Versions System Details Hank Leininger discovered that cvs did not properly handle SSHfor remote repositories. A remote attacker could use this toconstruct a cvs repository that when accessed could run arbitrarycode with the privileges of the user. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: cvs 2:1.12.13+real-22ubuntu0.1 Ubuntu 16.04 LTS: cvs 2:1.12.13+real-15ubuntu0.1 Ubuntu 14.04 LTS: cvs 2:1.12.13+real-12ubuntu0.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the [ more… ]