[월:] 2019년 06월

No Image

USN-4008-3: Linux kernel (Xenial HWE) vulnerabilities

2019-06-07 KENNETH 0

USN-4008-3: Linux kernel (Xenial HWE) vulnerabilities linux-lts-xenial, linux-aws vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 ESM Summary Several security issues were fixed in the Linux kernel. Software Description linux-aws – Linux kernel for Amazon Web Services (AWS) systems linux-lts-xenial – Linux hardware enablement kernel from Xenial for Trusty Details USN-4008-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Robert Święcki discovered that the Linux kernel did not properly apply Address Space Layout Randomization (ASLR) in some situations for setuid elf binaries. A local attacker could use this to improve the chances of exploiting an existing vulnerability in a setuid elf binary. (CVE-2019-11190) It was discovered that a null pointer dereference [ more… ]

No Image

USN-3991-2: Firefox regression

2019-06-07 KENNETH 0

USN-3991-2: Firefox regression firefox regression A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.04 Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary USN-3991-1 caused a regression in Firefox. Software Description firefox – Mozilla Open Source web browser Details USN-3991-1 fixed vulnerabilities in Firefox. The update caused a regression which resulted in issues when upgrading between Ubuntu releases. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, trick the user in to launching local executable binaries, obtain sensitive information, conduct cross-site scripting (XSS) attacks, or execute arbitrary code. (CVE-2019-11691, CVE-2019-11692, CVE-2019-11693, CVE-2019-11695, CVE-2019-11696, CVE-2019-11699, CVE-2019-11701, CVE-2019-7317, CVE-2019-9800, [ more… ]

Facing the Hordes on Black Friday and Cyber Monday

2019-06-07 KENNETH 0

Facing the Hordes on Black Friday and Cyber Monday For many retailers, the holiday shopping season is a time of both anticipation and trepidation. While most people can relax and celebrate with friends and family, retailers – both brick-and-mortar and online – brace themselves for the onslaught that begins on Black Friday and Cyber Monday. The challenges confronting both types of retailers are very similar. Facing massive visitor traffic to their stores, they must ensure every potential customer is welcomed in and given space to browse, and that the staff and resources are on hand to help them complete their transaction. Shoppers have plenty of choices, but are tight for time on these critical days. If one store appears overcrowded and slow to serve them, it’s easy to move next door. In this article, we share four ways you can use NGINX Open Source [ more… ]

[도서] 세상을 바꾸는 코딩

2019-06-07 KENNETH 0

[도서] 세상을 바꾸는 코딩 분야별 신상품 – 국내도서 – 컴퓨터와 인터넷 [도서]세상을 바꾸는 코딩 강태욱,강선우,강연수,박성원 공저 | 넥서스 | 2019년 06월 판매가 13,500원 (10%할인) | YES포인트 750원(5%지급) “창의력, 사고력, 논리력을 키워주는 코딩” “초, 중, 고 필수교육 과정의 미래가 보이는 코딩” 요즘 코딩 교육, 스마트교육, 메이크 교육, PBL(Project-Based Learning; 프로젝트 기반 교육), 자유학기제, S Source: [도서] 세상을 바꾸는 코딩

No Image

USN-4011-2: Jinja2 vulnerabilities

2019-06-06 KENNETH 0

USN-4011-2: Jinja2 vulnerabilities jinja2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 ESM Ubuntu 12.04 ESM Summary Several security issues were fixed in Jinja2. Software Description jinja2 – small but fast and easy to use stand-alone template engine Details USN-4011-1 fixed several vulnerabilities in Jinja2. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Olivier Dony discovered that Jinja incorrectly handled str.format. An attacker could possibly use this issue to escape the sandbox. (CVE-2016-10745) Brian Welch discovered that Jinja incorrectly handled str.format_map. An attacker could possibly use this issue to escape the sandbox. (CVE-2019-10906) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM python-jinja2 – 2.7.2-2ubuntu0.1~esm1 python3-jinja2 – 2.7.2-2ubuntu0.1~esm1 Ubuntu 12.04 ESM python-jinja2 – 2.6-1ubuntu0.2 python3-jinja2 [ more… ]