No Image

USN-6269-1: GStreamer Good Plugins vulnerability

2023-08-03 KENNETH 0

USN-6269-1: GStreamer Good Plugins vulnerability It was discovered that GStreamer Good Plugins incorrectly handled certain FLAC image tags. A remote attacker could use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37327) Source: USN-6269-1: GStreamer Good Plugins vulnerability

No Image

USN-6268-1: GStreamer Base Plugins vulnerabilities

2023-08-03 KENNETH 0

USN-6268-1: GStreamer Base Plugins vulnerabilities It was discovered that GStreamer Base Plugins incorrectly handled certain FLAC image tags. A remote attacker could use this issue to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37327) It was discovered that GStreamer Base Plugins incorrectly handled certain subtitles. A remote attacker could use this issue to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37328) Source: USN-6268-1: GStreamer Base Plugins vulnerabilities

Concerns over the European Union’s Cyber Resilience Act (CRA)

2023-08-02 KENNETH 0

Concerns over the European Union’s Cyber Resilience Act (CRA) As the world’s most popular open source content management system, WordPress acknowledges the European Union’s initiative to bolster the cybersecurity of digital hardware and software products with the Cyber Resilience Act (CRA). The Act’s effort to counter the increasing threat of cyberattacks and promote informed usage of digital products with increased security updates and transparency is commendable.  While we wholly endorse the objectives of the CRA, we are apprehensive about the Act’s implications on open source software due to unclear terms and definitions. Specifically, the Act’s prohibition on “unfinished software” and ambiguous definition of “commercial activity” could inadvertently inhibit innovation and economic participation in the European digital landscape. Open source projects, like WordPress, often rely on continual updates and improvements—a process that may technically fall under the label of “unfinished.” Furthermore, [ more… ]

No Image

USN-6267-1: Firefox vulnerabilities

2023-08-02 KENNETH 0

USN-6267-1: Firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-4047, CVE-2023-4048, CVE-2023-4049, CVE-2023-4051, CVE-2023-4053, CVE-2023-4055, CVE-2023-4056, CVE-2023-4057, CVE-2023-4058) Max Vlasov discovered that Firefox Offscreen Canvas did not properly track cross-origin tainting. An attacker could potentially exploit this issue to access image data from another site in violation of same-origin policy. (CVE-2023-4045) Alexander Guryanov discovered that Firefox did not properly update the value of a global variable in WASM JIT analysis in some circumstances. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-4046) Mark Brand discovered that Firefox did not properly validate the size of an untrusted input stream. An attacker could potentially [ more… ]

[도서] 텐서플로와 케라스로 구현하는 딥러닝 3/e

2023-08-02 KENNETH 0

[도서] 텐서플로와 케라스로 구현하는 딥러닝 3/e 분야별 신상품 – 국내도서 – 컴퓨터와 인터넷 [도서]텐서플로와 케라스로 구현하는 딥러닝 3/e 아미타 카푸어,안토니오 걸리,수짓 팔 저/이병욱 역 | 에이콘출판사 | 2023년 08월 판매가 45,000원 (10%할인) | YES포인트 2,500원(5%지급) 딥러닝에 관련된 거의 모든 최신 기술을 설명한다. 회귀부터 시작해 딥러닝의 기초를 설명하고, 컨볼루션 신경망, 순환 신경망, LTSM, 자연어 처리, 이미지 합성 등에 대한 최신 기술 동향을 소개한다. 특히 현재 활 Source: [도서] 텐서플로와 케라스로 구현하는 딥러닝 3/e