KENNETH – 페이지 754 – 지락문화예술공작단

USN-5120-1: Linux kernel (Azure) vulnerabilities

2021-10-22 KENNETH 0

USN-5120-1: Linux kernel (Azure) vulnerabilities It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-19449) It was discovered that the Linux kernel did not properly enforce certain types of entries in the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. An attacker could use this to bypass UEFI Secure Boot restrictions. (CVE-2020-26541) It was discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not ensure enough processing time was given to perform cleanups of large SEV VMs. A local attacker could use this to cause a denial of service (soft lockup). (CVE-2020-36311) It [ more… ]

Preparing the Windows 10 November 2021 Update for Release

2021-10-22 KENNETH 0

Preparing the Windows 10 November 2021 Update for Release Hello Windows Insiders! We are preparing the Windows 10 November 2021 Update (Windows 10, version 21H2) for release. We believe that Build 19044.1288 is the final build for the November 2021 Update, and the ISO for this build can be downloaded here. We will continue to improve the overall experience of the November 2021 Update on customers’ PCs through our usual servicing cadence. We are now offering the Windows 10 November 2021 Update to all Windows Insiders in the Release Preview Channel on Windows 10 via our “seeker” experience in Windows Update. This means Insiders currently on Windows 10, version 21H1 (or lower) in the Release Preview Channel will need to go to Settings > Update & Security > Windows Update and choose to download and install Windows 10, version 21H2. Once an Insider updates their PC [ more… ]

Improved authoring and debugging experiences in Microsoft Edge DevTools and Visual Studio Code

2021-10-22 KENNETH 0

Improved authoring and debugging experiences in Microsoft Edge DevTools and Visual Studio Code As web developers we spend a lot of time authoring our code in an editing environment. We then jump over to the browser to use the in-built developer tools to debug and tweak the product UI. The problem with this is that results of the tweaking and debugging aren’t reflected in the source code. In Microsoft Edge, we are currently working on a couple of solutions that are open for discussion, and we’d love your feedback on them If you prefer to watch a video instead of reading, here is a three minute introduction: The current problem with tweaks and changes in Developer Tools Today, browser DevTools provide highly sophisticated visual tools that teach you – for example – CSS syntax whilst you use them. These tools [ more… ]

The journey to making Halo Infinite a truly PC-first experience on day one

2021-10-21 KENNETH 0

The journey to making Halo Infinite a truly PC-first experience on day one On Thursday Xbox Wire shared how 343 Industries and Xbox took everything they learned from bringing Halo: The Master Chief Collection to PC to making Halo Infinite a game that looks, feels and plays like a PC shooter should, all the while honoring the legacy of what makes Halo, Halo. Head over to the post to read all about it and watch the video to hear directly from both the PC team and the Sandbox team at 343 Industries about how they built Halo Infinite to be a great PC experience in-game, out-of-game and off the screen. Source: The journey to making Halo Infinite a truly PC-first experience on day one

USN-5119-1: libcaca vulnerabilities

2021-10-21 KENNETH 0

USN-5119-1: libcaca vulnerabilities It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause a crash. (CVE-2021-30498, CVE-2021-30499) Source: USN-5119-1: libcaca vulnerabilities