지락문화예술공작단

USN-3208-2: Linux kernel (Xenial HWE) vulnerabilities

2017-02-22 KENNETH 0

USN-3208-2: Linux kernel (Xenial HWE) vulnerabilities Ubuntu Security Notice USN-3208-2 22nd February, 2017 linux-lts-xenial vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary Several security issues were fixed in the kernel. Software description linux-lts-xenial – Linux hardware enablement kernel from Xenial for Trusty Details USN-3208-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04LTS. This update provides the corresponding updates for the LinuxHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu14.04 LTS. It was discovered that the generic SCSI block layer in the Linux kernel didnot properly restrict write operations in certain situations. A localattacker could use this to cause a denial of service (system crash) orpossibly gain administrative privileges. (CVE-2016-10088) CAI Qian discovered that the sysctl implementation in the Linux kernel didnot properly perform reference counting in some situations. An unprivilegedattacker [ more… ]

USN-3209-1: Linux kernel vulnerabilities

2017-02-22 KENNETH 0

USN-3209-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-3209-1 22nd February, 2017 linux, linux-raspi2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Summary Several security issues were fixed in the kernel. Software description linux – Linux kernel linux-raspi2 – Linux kernel for Raspberry Pi 2 Details It was discovered that the generic SCSI block layer in the Linux kernel didnot properly restrict write operations in certain situations. A localattacker could use this to cause a denial of service (system crash) orpossibly gain administrative privileges. (CVE-2016-10088) Jim Mattson discovered that the KVM implementation in the Linux kernelmismanages the #BP and #OF exceptions. A local attacker in a guest virtualmachine could use this to cause a denial of service (guest OS crash).(CVE-2016-9588) Andrey Konovalov discovered a use-after-free vulnerability in the DCCPimplementation in the Linux kernel. A local [ more… ]

Running Microservices on OpenShift with the NGINX MRA’s Fabric Model

2017-02-22 KENNETH 0

Running Microservices on OpenShift with the NGINX MRA’s Fabric Model table, th, td { border: 1px solid black; } th { background-color: #d3d3d3; align: left; padding-left: 5px; padding-bottom: 2px; padding-top: 2px; line-height: 120%; } td { padding-left: 5px; padding-bottom: 5px; padding-top: 5px; line-height: 120%; } td.center { text-align: center; padding-bottom: 5px; padding-top: 5px; line-height: 120%; } Kubernetes has become a popular container platform for running microservices applications. It provides many important features, such as fault tolerance, load balancing, service discovery, autoscaling, rolling upgrades, and others. These features allow you to seamlessly develop, deploy, and manage containerized applications across a cluster of machines. Red Hat’s OpenShift 3 is a container platform built on top of Kubernetes. OpenShift extends Kubernetes with additional features and also includes commercial support, a requirement for many enterprise customers. In this blog post we will show you how [ more… ]

Building the Green Data Center and Delivering Enterprise Applications with ARM and NGINX Plus

2017-02-22 KENNETH 0

Building the Green Data Center and Delivering Enterprise Applications with ARM and NGINX Plus Enterprise-ready solution offers high performance and efficiency Situation ARM technology is at the heart of the world’s most advanced digital products. The company designs scalable, energy-efficient processors and related technologies to deliver the intelligence in applications ranging from sensors to servers, including smartphones, tablets, enterprise infrastructure, and the Internet of Things. ARM licenses its technology to its extensive network of partners who use it in the design of their products. ARM technology is in use in billions of products, which touch the lives of more than 80% of the world’s population. ARM’s interest in NGINX and NGINX Plus was driven by their participation in two projects. Project 1 — Building Greener Data Centers In 2013, ARM was asked to take part in a study funded [ more… ]

Adobe Flash Player security vulnerability release

2017-02-22 KENNETH 0

Adobe Flash Player security vulnerability release Today, we released an Adobe Flash Player security update to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about these updates can be found on the Security Update Guide. MSRC team Source: Adobe Flash Player security vulnerability release