[월:] 2019년 05월

Introducing NGINX 1.16 and 1.17

2019-05-22 KENNETH 0

Introducing NGINX 1.16 and 1.17 Today we release NGINX 1.17.0 – the latest version of the NGINX open source project, which is now the most popular web server on the Internet. This release also signals the start of the NGINX 1.17 development branch, following the release of NGINX 1.16.0 last month. In this blog we discuss the NGINX versioning scheme, look back at what happened during the NGINX 1.15 development cycle, and look forward to what is in store with NGINX 1.17. NGINX Versioning Explained At NGINX, we maintain two branches in the NGINX source code repository, named mainline and stable: Mainline is the active development branch where the latest features and bug fixes get added. It is denoted by an odd number in the second part of the version number, for example 1.17.0. Stable receives fixes for high‑severity bugs, but is not updated with new features. [ more… ]

No Image

USN-3990-1: urllib3 vulnerabilities

2019-05-21 KENNETH 0

USN-3990-1: urllib3 vulnerabilities python-urllib3 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.04 Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Several security issues were fixed in urllib3. Software Description python-urllib3 – HTTP library with thread-safe connection pooling for Python Details It was discovered that urllib3 incorrectly removed Authorization HTTP headers when handled cross-origin redirects. This could result in credentials being sent to unintended hosts. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-20060) It was discovered that urllib3 incorrectly stripped certain characters from requests. A remote attacker could use this issue to perform CRLF injection. (CVE-2019-11236) It was discovered that urllib3 incorrectly handled situations where a desired set of CA certificates were specified. This could result in certificates being accepted by the default CA certificates contrary to expectatons. [ more… ]

No Image

USN-3989-1: LibRaw vulnerabilities

2019-05-21 KENNETH 0

USN-3989-1: LibRaw vulnerabilities libraw vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Several security issues were fixed in LibRaw. Software Description libraw – raw image decoder library Details It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 libraw16 – 0.18.13-1ubuntu0.1 Ubuntu 18.04 LTS libraw16 – 0.18.8-1ubuntu0.3 Ubuntu 16.04 LTS libraw15 – 0.17.1-1ubuntu0.5 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need to restart your session [ more… ]

[도서] 구글 딥러닝 프레임워크 : 텐서플로우 실전

2019-05-21 KENNETH 0

[도서] 구글 딥러닝 프레임워크 : 텐서플로우 실전 분야별 신상품 – 국내도서 – 컴퓨터와 인터넷 [도서]구글 딥러닝 프레임워크 : 텐서플로우 실전 정저위,구쓰위 공저/장우진 역 | 광문각 | 2019년 05월 판매가 28,000원 (0%할인) | YES포인트 0원(0%지급) 최근 들어 뉴스, 블로그 등 여기저기서 ‘딥러닝’이란 단어를 쉽게 접할 수 있습니다. 수십 년 동안 인공지능 기술은 끊임없이 발전하고 있지만, 딥러닝 같은 학계와 산업에서 각광받는 기술은 10년간 어려움을 겪 Source: [도서] 구글 딥러닝 프레임워크 : 텐서플로우 실전

Announcing NGINX Ingress Controller for Kubernetes Release 1.5.0

2019-05-21 KENNETH 0

Announcing NGINX Ingress Controller for Kubernetes Release 1.5.0 h4 { font-weight:bolder; font-size:110%; } h5 { font-weight:bolder; font-size:110%; } We are pleased to announce release 1.5.0 of the NGINX Ingress Controller for Kubernetes. This represents a milestone in the development of our supported solution for Ingress load balancing on Kubernetes platforms, including Amazon Elastic Container Service for Kubernetes (EKS), the Azure Kubernetes Service (AKS), Google Kubernetes Engine (GKE), Red Hat OpenShift, IBM Cloud Private, Diamanti, and others. Release 1.5.0 includes: A new configuration approach using NGINX custom resources to easily define ingress policies Additional metrics, provided by a streamlined Prometheus exporter Simplified configuration of complex TLS deployments Support for load balancing traffic to external services, using ExternalName services A dedicated Helm chart repository The complete changelog for release 1.5.0, including bug fixes, improvements, and changes, is available in our GitHub repo. What Is the NGINX Ingress Controller for [ more… ]