No Image

2015년 10월 Oracle Critical Patch Update 권고

2015-10-22 KENNETH 0

□ 개요  o Oracle Critical Patch Update(CPU)는 Oracle사의 제품을 대상으로 다수의 보안 패치를 발표하는 주요 수단  o Oracle CPU 발표 이후, 관련 공격코드의 출현으로 인한 피해가 예상되는 바 Oracle 제품의 다중 취약점에 대한 패치를 권고    □ 설명  o 2015년 10월 Oracle CPU에서는 Oracle 자사 제품의 보안취약점 154개에 대한 패치를 발표[1]   □ 해당 소프트웨어  ㅇ Oracle Database Server, version(s) 11.2.0.4, 12.1.0.1, 12.1.0.2  ㅇ Mobile Server, version(s) 10.3.0.3, 11.3.0.2, 12.1.0.0  ㅇ Oracle Access Manager, version(s) 11.1.2.2, 11.1.2.3  ㅇ Oracle Business Intelligence Enterprise Edition, version(s) 11.1.1.7, 11.1.1.9  ㅇ Oracle Endeca Server, version(s) 7.3.0.0, 7.4.0.0, 7.5.1.1, 7.6.1.0.0  ㅇ Oracle Enterprise Data Quality, version(s) 8.1, 9.0, 11.1.1.7.4, 12.1.3.0.0  ㅇ Oracle Exalogic Infrastructure, version(s) EECS 2.0.6.2.3  ㅇ Oracle Fusion Middleware, version(s) 10.1.3.5, 11.1.1.7, 11.1.1.8, 11.1.1.9, 11.1.2.1, 11.1.2.2, 11.1.2.3, 12.1.2.0, 12.1.3.0  ㅇ Oracle GlassFish Server, version(s) 3.0.1, 3.1.2  ㅇ Oracle HTTP Server, version(s) 10.1.3.5, 11.1.1.7, [ more… ]

No Image

Apple(OS X, iOS, Watch) 보안 업데이트 권고

2015-10-22 KENNETH 0

□ 개요    o Apple社에서 자사 제품에 대해 다수의 취약점을 해결한 보안업데이트를 공지    o 공격자가 취약점을 이용하여 피해를 발생시킬 수 있어 해당 Apple 제품들을 사용하는 이용자들은 최신버전       으로 업데이트 권고 □ 대상 시스템 및 업데이트 내용 대상 시스템 업데이트된 소프트웨어 및 버전 OS X Yosemite v10.10.5, OS X El Capitan v10.11.1 및 이후 버전 OS X Server 5.0.15  OS X Yosemite v10.10.5 및 이후 버전 Xcode 7.1 OS X Mavericks v10.9.5 Mac EFI 보안 업데이트 2015-002 Windows 7 및 이후 버전 iTunes 12.3.1 OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, OS X El Capitan v10.11 OS X El Capitan 10.11.1 및 보안 업데이트 2015-007 OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, OS X El Capitan v10.11 Safari 9.0.1 Apple Watch Sport, Apple Watch, Apple Watch Edition, Apple Watch Hermes watchOS 2.0.1 iPhone 4s and later, iPad 2 및 [ more… ]

No Image

Microsoft Bounty Programs Expansion – .NET Core and ASP.NET Beta Bounty

2015-10-21 KENNETH 0

Today, I have another exciting expansion of the Microsoft Bounty Programs to announce. Please visit https://aka.ms/bugbounty to find out more. I’ll be discussing this new bounty in my talk at SyScan360 on October 21, 2015. We are delighted to offer a bounty for the .NET Core and ASP.NET Beta which Microsoft released earlier this month. .NET and ASP.NET represent critical building blocks in the Visual Studio Development Suite. This bounty is particularly interesting because the libraries and functions included in .NET enable developers to write their own programs with great security and stability, increasingly on many Operating Systems. This will extend to all supported platforms, initially including Linux and OS X, with some current exclusions to non-Windows platforms. You can find more information in the FAQs, .NET program terms and the .NET team’s blog. The highlights are as follows: .NET Core and ASP.NET Beta 8 and [ more… ]

No Image

Microsoft Bounty Programs Expansion – .NET Core and ASP.NET Beta Bounty

2015-10-20 KENNETH 0

Microsoft Bounty Programs Expansion – .NET Core and ASP.NET Beta Bounty Today, I have another exciting expansion of the Microsoft Bounty Programs to announce. Please visit https://aka.ms/bugbounty to find out more. I’ll be discussing this new bounty in my talk at SyScan360 on October 21, 2015. We are delighted to offer a bounty for the .NET Core and ASP.NET Beta which Microsoft released earlier this month. .NET and ASP.NET represent critical building blocks in the Visual Studio Development Suite. This bounty is particularly interesting because the libraries and functions included in .NET enable developers to write their own programs with great security and stability, increasingly on many Operating Systems. This will extend to all supported platforms, initially including Linux and OS X, with some current exclusions to non-Windows platforms. You can find more information in the FAQs, .NET program terms and the .NET team’s blog. The [ more… ]

No Image

MS15-107 – Important: Cumulative Security Update for Microsoft Edge (3096448) – Version: 1.1

2015-10-16 KENNETH 0

Severity Rating: ImportantRevision Note: V1.1 (October 16, 2015): Bulletin revised to announce a detection change in the 3097617 cumulative update for Windows 10. This is a detection change only. Customers who have already successfully updated their systems do not need to take any action.Summary: This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow information disclosure if a user views a specially crafted webpage using Microsoft Edge. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. Source: ms-security