KENNETH – 페이지 3852 – 지락문화예술공작단

USN-2872-3: Linux kernel (Raspberry Pi 2) vulnerability

2016-01-20 KENNETH 0

Ubuntu Security Notice USN-2872-3 19th January, 2016 linux-raspi2 vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Summary The system could be made to crash or run programs as an administrator. Software description linux-raspi2 – Linux kernel for Raspberry Pi 2 Details Yevgeny Pats discovered that the session keyring implementation in theLinux kernel did not properly reference count when joining an existingsession keyring. A local attacker could use this to cause a denial ofservice (system crash) or possibly execute arbitrary code withadministrative privileges. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 15.10: linux-image-4.2.0-1020-raspi2 4.2.0-1020.27 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need to reboot your computer to makeall the necessary changes. ATTENTION: Due to an unavoidable ABI change [ more… ]

An update on default_password_lifetime

2016-01-19 KENNETH 0

With MySQL 5.7, our goal is to be secure by default. This means that without having to change configuration settings or perform any additional steps, your fresh installation should be safe for production use. As part of this security initiative, MySQL 5.7 shipped with a new feature where user accounts will be disabled if the password has not been changed in a number of days.… Source: mysqlserverteam.com

RHSA-2016:0046-1: Important: kernel security update

2016-01-19 KENNETH 0

Red Hat Enterprise Linux: Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 6.2 Advanced Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. CVE-2015-5307, CVE-2015-8104 Source: rhn-errata

RHSA-2016:0045-1: Important: kernel security update

2016-01-19 KENNETH 0

Red Hat Enterprise Linux: Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. CVE-2015-5364, CVE-2015-5366 Source: rhn-errata

Announcing NGINX Plus R8

2016-01-19 KENNETH 0

NGINX, Inc. is proud to announce the availability of NGINX Plus Release 8 (R8), the latest release of our application delivery platform. Prominent among the features in NGINX Plus R8 is the OAuth Technology Preview, an implementation of OAuth-based authentication. OAuth 2.0 is the industry standard for authentication and authorization. It can be used to add Single Sign On (SSO) to your applications as well as control access to your APIs. In addition, this release includes a fully production-ready and hardened implementation of HTTP/2, a persistent on-the-fly reconfiguration API, scalable caching for large video files, and many more features to ensure flawless application delivery. The key new features in NGINX Plus R8 are: OAuth Technology Preview – OAuth 2.0 has become the industry standard for managing user identity on the Internet. When you use your Facebook or Google account to log in [ more… ]