No Image

USN-3930-2: Linux kernel (HWE) vulnerabilities

2019-04-03 KENNETH 0

USN-3930-2: Linux kernel (HWE) vulnerabilities linux-hwe, linux-azure vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.04 LTS Summary Several security issues were fixed in the Linux kernel. Software Description linux-azure – Linux kernel for Microsoft Azure Cloud systems linux-hwe – Linux hardware enablement (HWE) kernel Details USN-3930-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.10 for Ubuntu 18.04 LTS. Mathias Payer and Hui Peng discovered a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) subsystem. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2018-19824) Shlomi Oberman, Yuli Shapiro, and Ran Menscher discovered an information leak in the Bluetooth implementation of the Linux kernel. An attacker within Bluetooth range could use [ more… ]

No Image

USN-3930-1: Linux kernel vulnerabilities

2019-04-03 KENNETH 0

USN-3930-1: Linux kernel vulnerabilities linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Summary Several security issues were fixed in the Linux kernel. Software Description linux – Linux kernel linux-aws – Linux kernel for Amazon Web Services (AWS) systems linux-azure – Linux kernel for Microsoft Azure Cloud systems linux-gcp – Linux kernel for Google Cloud Platform (GCP) systems linux-kvm – Linux kernel for cloud environments linux-raspi2 – Linux kernel for Raspberry Pi 2 Details Mathias Payer and Hui Peng discovered a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) subsystem. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2018-19824) Shlomi Oberman, Yuli Shapiro, and Ran Menscher discovered an information leak in the Bluetooth implementation of the Linux kernel. An attacker within [ more… ]

No Image

Windows 10 SDK Preview Build 18362 available now!

2019-04-03 KENNETH 0

Windows 10 SDK Preview Build 18362 available now! Today, we released a new Windows 10 Preview Build of the SDK to be used in conjunction with Windows 10 Insider Preview (Build 18362 or greater). The Preview SDK Build 18362 contains bug fixes and under development changes to the API surface area. The Preview SDK can be downloaded from developer section on Windows Insider. For feedback and updates to the known issues, please see the developer forum. For new developer feature requests, head over to our Windows Platform UserVoice. Things to note: This build works in conjunction with previously released SDKs and Visual Studio 2017. You can install this SDK and still also continue to submit your apps that target Windows 10 build 1809 or earlier to the Microsoft Store. The Windows SDK will now formally only be supported by Visual Studio 2017 and greater. You can [ more… ]

No Image

Secure Distribution of SSL Private Keys with NGINX

2019-04-03 KENNETH 0

Secure Distribution of SSL Private Keys with NGINX This blog post describes several methods for securely distributing the SSL private keys that NGINX uses when hosting SSL‑encrypted websites. It explains: The standard approach for configuring SSL with NGINX, and the potential security limitations How to encrypt the keys using passwords that are stored separately from the NGINX configuration How to distribute the encryption passwords securely, avoiding disk storage, and then revoke them when needed For many deployments, the standard approach is sufficient. The two more sophisticated approaches discussed in this post block other ways an attacker can obtain SSL private keys. We’ll also look at a couple more techniques in follow‑up posts: Using third‑party secret stores such as Hashicorp Vault to securely distribute passwords Automating the provisioning of certificates from Vault to NGINX Plus’s key‑value store, so that private key material [ more… ]

AWS Application Load Balancer(ALB) 고급 요청 라우팅 기능 출시

2019-04-03 KENNETH 0

AWS Application Load Balancer(ALB) 고급 요청 라우팅 기능 출시 AWS의 부하 분산 서비스인 Application Load Balancer는 2016년 6월에 출시되었습니다! 콘텐츠 기반 라우팅을 지원하는 이 서비스는 서버리스 및 컨테이너 기반 애플리케이션에서 작동하며 유연하게 크기를 조정할 수 있습니다. 많은 AWS 고객이 포트 전송(컨테이너 기반 애플리케이션에 유용함), 상태 확인, 서비스 검색, 리디렉션, 고정 응답 및 기본 인증 등의 다른 ALB 기능을 활용하면서 기존의 호스트 및 경로 기반 라우팅을 사용하여 HTTP 및 HTTPS 애플리케이션을 구동하고 있습니다. 오늘은 고급 요청 라우팅(Advanced Request Routing)의 새로운 기능을 소개합니다. 고급 요청 라우팅 이 호스트 기반 라우팅 기능을 사용하면 Host 헤더를 사용하여 원하는 대상 그룹으로 트래픽을 라우팅하는 규칙을 작성할 수 있습니다. 오늘 이 기능이 확장되고 일반화됨에 따라 이제 표준 및 사용자 지정 HTTP 헤더 및 메서드, 쿼리 문자열과 소스 IP 주소를 기반으로 규칙을 작성하고 트래픽을 라우팅할 수 있습니다. 또한 보다 강력한 규칙 및 조건을 사용할 수 있습니다. 즉, 규칙에 [ more… ]