2023년 03월 – 지락문화예술공작단

Weather from Microsoft Start named the most accurate global forecast provider

2023-03-25 KENNETH 0

Weather from Microsoft Start named the most accurate global forecast provider Following the last few years of record-breaking natural disasters, it’s clear that weather prediction accuracy isn’t just for making daily decisions when going outdoors – it can save lives. From deadly risk of hurricanes to lightning storms to flooding, there’s a critical need for a high-accuracy weather forecast tool. To meet the needs of our users, we decided to build our own weather forecast system in Microsoft Start. Using industry-leading machine learning, AI and other innovative technologies over the last two years, Microsoft built one of the world’s leading weather forecasting capabilities. In a new, independent study commissioned by Microsoft and conducted by ForecastWatch comparing the top global weather providers, Weather from Microsoft Start was named the most accurate weather forecasting service. * ForecastWatch analyzed Weather from Microsoft Start’s [ more… ]

USN-5971-1: Graphviz vulnerabilities

2023-03-24 KENNETH 0

USN-5971-1: Graphviz vulnerabilities It was discovered that graphviz contains null pointer dereference vulnerabilities. Exploitation via a specially crafted input file can cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-10196) It was discovered that graphviz contains null pointer dereference vulnerabilities. Exploitation via a specially crafted input file can cause a denial of service. These issues only affected Ubuntu 14.04 ESM and Ubuntu 18.04 LTS. (CVE-2019-11023) It was discovered that graphviz contains a buffer overflow vulnerability. Exploitation via a specially crafted input file can cause a denial of service or possibly allow for arbitrary code execution. These issues only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-18032) Source: USN-5971-1: Graphviz vulnerabilities

USN-5970-1: Linux kernel vulnerabilities

2023-03-24 KENNETH 0

USN-5970-1: Linux kernel vulnerabilities It was discovered that the KVM VMX implementation in the Linux kernel did not properly handle indirect branch prediction isolation between L1 and L2 VMs. An attacker in a guest VM could use this to expose sensitive information from the host OS or other guest VMs. (CVE-2022-2196) It was discovered that a race condition existed in the Xen network backend driver in the Linux kernel when handling dropped packets in certain circumstances. An attacker could use this to cause a denial of service (kernel deadlock). (CVE-2022-42328, CVE-2022-42329) Gerald Lee discovered that the USB Gadget file system implementation in the Linux kernel contained a race condition, leading to a use-after-free vulnerability in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-4382) José Oliveira and [ more… ]

USN-5969-1: gif2apng vulnerabilities

2023-03-24 KENNETH 0

USN-5969-1: gif2apng vulnerabilities It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a denial of service (system crash). (CVE-2021-45909, CVE-2021-45910, CVE-2021-45911) Source: USN-5969-1: gif2apng vulnerabilities

Announcing Windows 11 Insider Preview Build 25324

2023-03-24 KENNETH 0

Announcing Windows 11 Insider Preview Build 25324 Hello Windows Insiders, today we are releasing Windows 11 Insider Preview Build 25324 to the Canary Channel. We are releasing ISOs for this build – they can be downloaded here. REMINDER: As builds released to the Canary Channel are “hot off the presses,” we will offer limited documentation for builds flighted to the Canary Channel (no known issues for example), but we will not publish a blog post for every flight – only when new features are available in a build. And like the previous Canary Channel build, this build has a few new features and changes to document. What’s new in Build 25324 Evolved Widgets Board We are beginning to preview a revamp of the widgets board experience with a larger canvas (3-columns if supported by the device) and dedicated sections for widgets [ more… ]