[월:] 2018년 02월

No Image

RHSA-2018:0260-1: Moderate: systemd security update

2018-02-01 KENNETH 0

RHSA-2018:0260-1: Moderate: systemd security update Red Hat Enterprise Linux: An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. CVE-2018-1049 Source: RHSA-2018:0260-1: Moderate: systemd security update

No Image

RHSA-2017:2788-2: Important: augeas security update

2018-02-01 KENNETH 0

RHSA-2017:2788-2: Important: augeas security update Red Hat Enterprise Linux: An update for augeas is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. CVE-2017-7555 Source: RHSA-2017:2788-2: Important: augeas security update

No Image

RHBA-2017:2939-2: augeas bug fix update

2018-02-01 KENNETH 0

RHBA-2017:2939-2: augeas bug fix update Red Hat Enterprise Linux: Updated augeas packages that fix one bug are now available for Red Hat Enterprise Linux 7. Source: RHBA-2017:2939-2: augeas bug fix update

No Image

USN-3553-1: Ruby vulnerabilities

2018-02-01 KENNETH 0

USN-3553-1: Ruby vulnerabilities Ubuntu Security Notice USN-3553-1 31st January, 2018 ruby2.3 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Summary Several security issues were fixed in Ruby. Software description ruby2.3 – Interpreter of object-oriented scripting language Ruby Details It was discovered that Ruby failed to validate specification names.An attacker could possibly use a maliciously crafted gem to potentiallyoverwrite any file on the filesystem. (CVE-2017-0901) It was discovered that Ruby was vulnerable to a DNS hijacking vulnerability.An attacker could use this to possibly force the RubyGems client to downloadand install gems from a server that the attacker controls. (CVE-2017-0902) It was discovered that Ruby incorrectly handled certain YAML files. An attacker coulduse this to possibly execute arbitrary code. (CVE-2017-0903) Update instructions The problem can be corrected by updating your system to the [ more… ]

[도서] 웹 취약점 진단 기술

2018-02-01 KENNETH 0

[도서] 웹 취약점 진단 기술 분야별 신상품 – 국내도서 – 컴퓨터와 인터넷 [도서]웹 취약점 진단 기술 여동균 저 | 한빛미디어 | 2018년 02월 판매가 16,200원 (10%할인) | YES포인트 900원(5%지급) 6명의 전문가 필자가 참여해 집필한 KISA 웹 취약점 진단 22개 항목 완벽 실습서이자 웹 취약점 진단의 표준 지침서 여동균 외 5명의 필자가 참여해 집필한 ‘누구나 쉽게 따라 하는 웹 취약점 진단 기술’은 Source: [도서] 웹 취약점 진단 기술