KENNETH – 페이지 49 – 지락문화예술공작단

USN-6237-2: curl regression

2023-07-20 KENNETH 0

USN-6237-2: curl regression USN-6237-1 fixed vulnerabilities in curl. The update caused a certificate wildcard handling regression on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Hiroki Kurosawa discovered that curl incorrectly handled validating certain certificate wildcards. A remote attacker could possibly use this issue to spoof certain website certificates using IDN hosts. (CVE-2023-28321) Hiroki Kurosawa discovered that curl incorrectly handled callbacks when certain options are set by applications. This could cause applications using curl to misbehave, resulting in information disclosure, or a denial of service. (CVE-2023-28322) It was discovered that curl incorrectly handled saving cookies to files. A local attacker could possibly use this issue to create or overwrite files. This issue only affected Ubuntu 22.10, and Ubuntu 23.04. (CVE-2023-32001) Source: USN-6237-2: curl regression

Announcing Windows 11 Insider Preview Build 23506

2023-07-20 KENNETH 0

Announcing Windows 11 Insider Preview Build 23506 Hello Windows Insiders, today we are releasing Windows 11 Insider Preview Build 23506 to the Dev Channel. We are releasing ISOs for this build – they can be downloaded here. What’s new in Build 23506 Passwordless experience with Windows Hello for Business With Windows Hello for Business (WHFB), Windows provides organizations with a strong, phish-resistant credential, helping customers move to a passwordless future. Enterprise customers can now set the EnablePasswordlessExperience policy that promotes a user experience on AAD joined machines for core authentication scenarios without requiring a password. This new experience hides passwords from certain Windows authentication scenarios and leverages passwordless recovery mechanisms, such as WHFB PIN reset, if necessary. Once the policy is set, it removes passwords from the user experience, both for device logon as well as in-session auth scenarios like password [ more… ]

Dev Home Preview 0.3 Release

2023-07-20 KENNETH 0

Dev Home Preview 0.3 Release We’re back with another release for Dev Home! This release updates Dev Home Preview to version 0.3 and the Dev Home GitHub extension to version 0.3 as well. You can install Dev Home from the Microsoft Store or from the GitHub releases page. Let’s get into what’s new. 😊 Rearrangeable widgets You read right! Widgets can now be rearranged in the Dev Home dashboard by clicking and dragging. 🎉 We’ve also fixed the bug where your widgets would get randomly rearranged, so your preferred dashboard layout should now remain intact. Miscellaneous improvements 🛠️ The GitHub query is now displayed when adding an issue or pull request widget with a URL containing filters. 🛠️ Empty widgets show a message rather than nothing. 🛠️ In the repository review and repository tool dialogs, long names are now truncated. [ more… ]

Get PC titles for less through Microsoft Store Ultimate Game Sale

2023-07-20 KENNETH 0

Get PC titles for less through Microsoft Store Ultimate Game Sale Looking for a good deal on new PC titles to add to your collection? Check out the Microsoft Store Ultimate Game Sale, which runs through July 31 with discounts on select Xbox and PC games, PC accessories and Xbox console bundles. Top PC titles on sale include “Disney Speedstorm Deluxe Founders Pack,” “Sunshine Island” and “Flight Sim – Premium Deluxe” – but you’ll find hundreds more to choose from. Plus, save up to 50% on select Microsoft accessories for your PC device. Head over to Xbox Wire to get all the details on the sale. Source: Get PC titles for less through Microsoft Store Ultimate Game Sale

USN-6238-1: Samba vulnerabilities

2023-07-19 KENNETH 0

USN-6238-1: Samba vulnerabilities It was discovered that Samba incorrectly handled Winbind NTLM authentication responses. An attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-2127) Andreas Schneider discovered that Samba incorrectly enforced SMB2 packet signing. A remote attacker could possibly use this issue to obtain or modify sensitive information. This issue only affected Ubuntu 23.04. (CVE-2023-3347) Florent Saudel and Arnaud Gatignolof discovered that Samba incorrectly handled certain Spotlight requests. A remote attacker could possibly use this issue to cause Samba to consume resources, leading to a denial of service. (CVE-2023-34966, CVE-2023-34967) Ralph Boehme and Stefan Metzmacher discovered that Samba incorrectly handled paths returned by Spotlight requests. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2023-34968) Source: USN-6238-1: Samba vulnerabilities