KENNETH – 페이지 2389 – 지락문화예술공작단

USN-3594-1: Linux kernel vulnerability

2018-03-09 KENNETH 0

USN-3594-1: Linux kernel vulnerability linux vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary The system could be made to expose sensitive information. Software Description linux – Linux kernel Details USN-3542-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 14.04 LTS. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. Original advisory details: Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS linux-image-3.13.0-143-generic – 3.13.0-143.192 linux-image-3.13.0-143-generic-lpae – 3.13.0-143.192 linux-image-3.13.0-143-lowlatency – 3.13.0-143.192 linux-image-generic – 3.13.0.143.153 linux-image-generic-lpae – [ more… ]

Conditional Access Control with Microsoft Azure Active Directory

2018-03-09 KENNETH 0

Conditional Access Control with Microsoft Azure Active Directory For many organizations, Microsoft Active Directory represents the single, canonical source of truth for the identities of employees and trusted users. When building and deploying cloud‑based business applications, the Azure platform is particularly attractive due to its native integration with Active Directory. Microsoft Azure supports a wide range of standards‑based federated identity and single sign‑on technologies to help developers authenticate, consume, and make decisions based on the identities of users defined in Active Directory. However, there are some scenarios where it is challenging or undesirable to implement these standards‑based technologies at the application level, such as: When moving existing applications to the cloud, it can be difficult to modernize the underlying authentication system to support single sign‑on. When building a microservices‑style application, it is preferable to centralize the authentication and access control [ more… ]

How mixed reality is changing the game for healthcare, from performing live surgeries to delivering ultrasounds in 3D

2018-03-09 KENNETH 1

How mixed reality is changing the game for healthcare, from performing live surgeries to delivering ultrasounds in 3D Last year around this time I had the chance to write a post about one of my favorite mixed reality uses cases – healthcare. Since that time, we have continued to see remarkable momentum for mixed reality across numerous facets of the industry. This week at HIMSS our team had the privilege to once again be on the ground to see and experience how customers and partners are embracing mixed reality to transform the way they innovate, support, and help others. Coming out of the show I wanted to take a moment to spotlight some of the innovation work we are seeing from organizations who are working to forge the future of healthcare. CAE Healthcare Joining us onsite at HIMSS this year [ more… ]

USN-3592-2: ClamAV vulnerabilities

2018-03-09 KENNETH 0

USN-3592-2: ClamAV vulnerabilities clamav vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 ESM Summary Several security issues were fixed in ClamAV. Software Description clamav – Anti-virus utility for Unix Details USN-3592-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-0202) Hanno Böck discovered that ClamAV incorrectly handled parsing certain XAR files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2018-1000085) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM clamav [ more… ]

USN-3593-1: Zsh vulnerabilities

2018-03-08 KENNETH 0

USN-3593-1: Zsh vulnerabilities zsh vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in Zsh. Software Description zsh – shell with lots of features Details It was discovered that Zsh incorrectly handled certain enviroment variables. An attacker could possibly use this issue to gain privileged access to the system. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-10070) It was discovered that Zsh incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-10071) It was discovered that Zsh incorrectly handled some symbolic links. An attacker could possibly use this to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-10072) It was discovered that Zsh incorrectly handled certain errors. An attacker [ more… ]