[B! SSH][Debian] raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

raimon49 id:raimon49

SSHã¨Debianã«é–¢ã™ã‚‹raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

xzãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ä»•è¾¼ã¾ã‚ŒãŸ3å¹´ãŒã‹ã‚Šã®ãƒãƒƒã‚¯ãƒ‰ã‚¢ã€ã‚¹ã‚±ãƒ¼ãƒ«ç›´å‰ã«è¦‹ã¤ã‘ãŸã®ã¯Microsoftã®é–‹ç™ºè€… | gihyo.jp
Linux Daily Topics xzãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ä»•è¾¼ã¾ã‚ŒãŸ3å¹´ãŒã‹ã‚Šã®ãƒãƒƒã‚¯ãƒ‰ã‚¢â â ã€ã‚¹ã‚±ãƒ¼ãƒ«ç›´å‰ã«è¦‹ã¤ã‘ãŸã®ã¯Microsoftã®é–‹ç™ºè€… â€œã‚¢ãƒƒãƒ—ã‚¹ãƒˆãƒªãƒ¼ãƒ ã®xzãƒªãƒã‚¸ãƒˆãƒªã¨xz tarballsã¯ãƒãƒƒã‚¯ãƒ‰ã‚¢åŒ–ã•ã‚Œã¦ã„ã‚‹ï¼ˆThe upstream xz repository and the xz tarballs have been backdooredï¼‰â â€â€•2024å¹´3æœˆ29æ—¥ã€Microsoftã«æ‰€å±žã™ã‚‹é–‹ç™ºè€… Andres FreundãŒã€ŒOpenwall.comã€ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã«æŠ•ç¨¿ã—ãŸãƒã‚¹ãƒˆã¯ä¸–ç•Œä¸ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹é–¢ä¿‚è€…ã«è¡æ’ƒã‚’ä¸ŽãˆãŸã€‚ backdoor in upstream xz/liblzma leading to ssh server compromise -oss-security ä¸»è¦ãªLinuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã«ã¯ã»ã¼å«ã¾ã‚Œã¦ã„ã‚‹ãƒ‡ãƒ¼ã‚¿åœ§ç¸®ãƒ—ãƒã‚°ãƒ©
raimon49 2024/04/03
ã„ã¡ç¤¾å“¡ã®çŸ¥çš„å¥½å¥‡å¿ƒã¨è·äººæŠ€ã‚’è®ƒãˆã¦ãã‚Œã‚‹äººç‰©ãŒCEOã‚„ã£ã¦ã‚‹ã®å¼·ã™ãŽã‚‹ã ã‚ã€‚ä½™è£•ã®ã‚ã‚‹ä¼æ¥ãŒå„ªç§€ãªè·äººã‚’ä½™è£•æŒãŸã›ã¦åƒã‹ã›ã¦ã„ãŸã‹ã‚‰ãŸã¾ãŸã¾ç™ºè¦‹ã§ããŸã€‚

CPU

Debian

Microsoft

OSS

PostgreSQL

RHEL

Security

SSH

login

patch
ãƒªãƒ³ã‚¯
XZ Utilsã®è„†å¼±æ€§ CVE-2024-3094 ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2024å¹´3æœˆ29æ—¥ã€Linuxå‘ã‘åœ§ç¸®ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã¨ã—ã¦åºƒãåˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹XZ Utilsã«æ·±åˆ»ãªè„†å¼±æ€§ CVE-2024-3094 ãŒç¢ºèªã•ã‚ŒãŸã¨ã—ã¦ã€ç ”ç©¶è€…ã‚„ãƒ™ãƒ³ãƒ€ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã¯ç‰¹å®šã®æ¡ä»¶ä¸‹ã«ãŠã„ã¦ãƒãƒƒã‚¯ãƒ‰ã‚¢ã¨ã—ã¦æ‚ªç”¨ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã‚‚ã®ã¨ã¿ã‚‰ã‚Œã¦ãŠã‚Šã€å½“è©²ã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã®ãƒ¡ãƒ³ãƒ†ãƒŠã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã‚ˆã‚Šå®Ÿè£…ã•ã‚ŒãŸã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã‚µãƒ—ãƒ©ã‚¤ãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒã®å¯èƒ½æ€§ãŒæŒ‡æ‘˜ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è„†å¼±æ€§ã®æ¦‚è¦ xzã¨ã¯ä¸»è¦ãªLinuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã«å«ã¾ã‚Œã‚‹æ±Žç”¨çš„ãªãƒ‡ãƒ¼ã‚¿åœ§ç¸®å½¢å¼ã§ã€ä»Šå›žå•é¡ŒãŒç¢ºèªã•ã‚ŒãŸã®ã¯ãã®åœ§ç¸®ãƒ»è§£å‡ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã§ã‚ã‚‹liblzma(API)ã‚’å«ã‚€XZ Utilsã€‚CVE-2024-3094ãŒæŽ¡ç•ªã•ã‚Œã¦ãŠã‚Šã€Red Hatã«ã‚ˆã£ã¦è©•ä¾¡ã•ã‚ŒãŸCVSSåŸºæœ¬å€¤ã¯ãƒ•ãƒ«ã‚¹ã‚³ã‚¢ã®10ã€‚å½±éŸ¿ã‚’å—ã‘ãŸãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ãƒªãƒ³ã‚¯ã—ã¦ã„ã‚‹ssh
raimon49 2024/04/01
Debian

OSS

RHEL

Security

SSH

login

patch
ãƒªãƒ³ã‚¯
ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã§10ç§’é–“ã ã‘sshdã‚’å…¬é–‹ã™ã‚‹è¨å®š - hnwã®æ—¥è¨˜
å…ˆæ—¥Twitterã«æ¬¡ã®ã‚ˆã†ãªæ›¸ãè¾¼ã¿ã‚’ã—ãŸã¨ã“ã‚æ€ã£ãŸã‚ˆã‚Šåå¿œãŒè‰¯ã‹ã£ãŸã®ã§ã€è©³ç´°ã®è¨å®šã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ UDP53ç•ªã€TCP443ç•ªã€UDP123ç•ªã¨ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã‚’ã™ã‚‹ã¨TCP443ç•ªã«10ç§’ã ã‘sshdãŒç¾ã‚Œã‚‹ã€ã¨ã„ã†ä¸äºŒç—…å…¨é–‹ã®è¨å®šã‚’ã—ãŸã€‚çš†æ§˜ã«ã‚‚ãŠå‹§ã‚ã—ãŸã„ã€‚â€” hnw (@hnw) 2017å¹´3æœˆ26æ—¥ ã¨ã„ã£ã¦ã‚‚ç‰¹æ®Šãªã“ã¨ã‚’ã—ãŸã‚ã‘ã§ã¯ãªãã€knockdã§ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã®è¨å®šã‚’è¡Œã„ã€iptablesã¨çµ„ã¿åˆã‚ã›ã¦å®Ÿç¾ã—ã¾ã—ãŸã€‚ ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã¨ã¯ ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã¨ã„ã†ã®ã¯ã€æ±ºã‚ã‚‰ã‚ŒãŸãƒãƒ¼ãƒˆã‚’æ±ºã‚ã‚‰ã‚ŒãŸé †ç•ªã§å©ãã“ã¨ã§ãƒ•ã‚¡ã‚¤ã‚¢ãƒ¼ã‚¦ã‚©ãƒ¼ãƒ«ã«ç©´ã‚’ç©ºã‘ã‚‰ã‚Œã‚‹ã‚ˆã†ãªä»•çµ„ã¿ã®ã“ã¨ã§ã™ã€‚ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã‚’ä½¿ãˆã°ã€TCPã®7000ç•ªã€8000ç•ªã€9000ç•ªã®3ãƒãƒ¼ãƒˆã«ãƒ‘ã‚±ãƒƒãƒˆã‚’é€ã‚Šã¤ã‘ã‚‹ã¨22ç•ªãƒãƒ¼ãƒˆ (SSH) ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•ã‚Œã‚‹ã€ã¨ã„ã£ãŸè¨å®šãŒã§ãã¾ã™ã€‚ ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã®
raimon49 2017/03/29
knockdã§è¨å®šã—ã¦ProxyCommandã§ãƒãƒ¼ãƒˆãƒŽãƒƒã‚ãƒ³ã‚°ã—ã¦ãƒã‚°ã‚¤ãƒ³ã€‚é¢ç™½ã„ã€‚æœ¬æ–‡ã«ã‚ã‚‹é€šã‚Šæ¥å‹™ã§ã¯ä½¿ã†æ©Ÿä¼šç„¡ã•ãã†ã ã‘ã©å€‹äººç”¨é€”ã§è¨å®šã—ã¦ã¿ãŸããªã‚‹ã€‚

Debian

SSH

network

study

ä¸äºŒç—…
ãƒªãƒ³ã‚¯
ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆãƒ¬ã‚¹ã§ã‚·ãƒ³ãƒ—ãƒ«ãªæ§‹æˆç®¡ç†ãƒ„ãƒ¼ãƒ«ã€ŒAnsibleã€å…¥é–€ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
è¿‘å¹´ã€Chefã‚„Puppetãªã©ã®æ§‹æˆç®¡ç†ãƒ„ãƒ¼ãƒ«ãŒäººæ°—ã ãŒã€æ–°ãŸã«æ³¨ç›®ã•ã‚Œã¤ã¤ã‚ã‚‹æ§‹æˆç®¡ç†ãƒ„ãƒ¼ãƒ«ã¨ã—ã¦ã€ŒAnsibleã€ãŒã‚ã‚‹ã€‚Ansibleã¯è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚·ãƒ³ãƒ—ãƒ«ã§ã€ç®¡ç†å¯¾è±¡ã‚µãƒ¼ãƒãƒ¼ã«ç‰¹åˆ¥ãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã“ã¨ãªãåˆ©ç”¨ã§ãã‚‹ãªã©ã€æœ€å°é™ã®æ‰‹é–“ã§å„ç¨®è¨å®šã‚’è‡ªå‹•åŒ–ã§ãã‚‹ã®ãŒç‰¹å¾´ã ã€‚ä»Šå›žã¯ã“ã®Ansibleã«ã¤ã„ã¦ãã®åŸºæœ¬çš„ãªä½¿ã„æ–¹ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ å°è¦æ¨¡ãªç’°å¢ƒã§ã‚‚æ‰‹è»½ã«ä½¿ãˆã‚‹Ansible ã‚ã‚‰ã‹ã˜ã‚ç”¨æ„ã—ã¦ãŠã„ãŸè¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã«å¾“ã£ã¦ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚„è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ä¿®æ£ã€ã‚µãƒ¼ãƒ“ã‚¹ã®èµ·å‹•/åœæ¢ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯è¨å®šã¨ã„ã£ãŸã‚µãƒ¼ãƒãƒ¼ã®å„ç¨®è¨å®šã‚’è‡ªå‹•çš„ã«å®Ÿè¡Œã™ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚’æ§‹æˆç®¡ç†ãƒ„ãƒ¼ãƒ«ã¨å‘¼ã¶ã€‚ä»£è¡¨çš„ãªã‚‚ã®ã¨ã—ã¦ã¯ã€ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸ã§ã‚‚éŽåŽ»ã«å–ã‚Šä¸Šã’ã¦ã„ã‚‹Chefã‚„PuppetãŒã‚ã‚‹ã€‚ é–¢é€£è¨˜äº‹ï¼š ã‚µãƒ¼ãƒãƒ¼è¨å®šãƒ„ãƒ¼ãƒ«ã€ŒChefã€å¿œç”¨ç·¨ï¼šknife-soloã¨Data Bagã‚’
raimon49 2015/04/15
Ansible

CentOS

Debian

Python

SSH
ãƒªãƒ³ã‚¯
gitolite ã§ Git ãƒªãƒã‚¸ãƒˆãƒªã¸ã® SSH ã‚¢ã‚¯ã‚»ã‚¹ã‚’åˆ¶å¾¡ã™ã‚‹ - WebOS Goodies
WebOS Goodies ã¸ã‚ˆã†ã“ãï¼ WebOS ã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®æœªæ¥å½¢ã€‚ã‚ã‚‰ã‚†ã‚‹ Web ã‚µã‚¤ãƒˆãŒç¹‹ãŒã‚Šã€å…±æœ‰ã—ã€å”åŠ›ã—ã¦å‰µã‚Šä¸Šã’ã‚‹ã€ã²ã¨ã¤ã®å·¨å¤§ãªæƒ…å ±ã‚·ã‚¹ãƒ†ãƒ ã§ã™ã€‚ãã“ã§ã¯ã€ã‚ã‚‰ã‚†ã‚‹æƒ…å ±ãŒãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã«è“„ç©ã•ã‚Œã€æˆ‘ã€…ã¯ã„ã¤ã§ã‚‚ã€ã©ã“ã‹ã‚‰ã§ã‚‚ã€å¤šå½©ãªãƒ‡ãƒã‚¤ã‚¹ã‚’ä½¿ã£ã¦ãã‚Œã‚‰ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¾ã™ã€‚ WebOS Goodies ã¯ã€ã•ã¾ã–ã¾ãªæƒ…å ±æä¾›ã‚„ãƒ„ãƒ¼ãƒ«é–‹ç™ºã‚’é€šã—ã¦ã€ãã‚“ãªä¸–ç•Œã®å®Ÿç¾ã«å°‘ã—ã§ã‚‚è²¢çŒ®ã™ã‚‹ã¹ãæ´»å‹•ã—ã¦ã„ãã¾ã™ã€‚ å…ˆæ—¥ã€å®‰ä¾¡ãª VPS ã‚µãƒ¼ãƒ“ã‚¹ã§ã‚ã‚‹ ServersMan@VPS ã‚’å¥‘ç´„ã—ã¾ã—ã¦ã€ä»¥å‰ã‹ã‚‰æ¬²ã—ã„ã¨æ€ã£ã¦ã„ãŸ Git ãƒªãƒã‚¸ãƒˆãƒªã®ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ç’°å¢ƒã‚’æ§‹ç¯‰ã—ã¦ã¿ã¾ã—ãŸã€‚è¤‡æ•°ã® Git ãƒªãƒã‚¸ãƒˆãƒªã‚’ä½œæˆã—ã¦ã€ãƒªãƒã‚¸ãƒˆãƒªã”ã¨ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’åˆ¶é™ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ Github ã‚’ä½¿ãˆã¨ã„ã†è©±ã‚‚ã‚ã‚Šã¾ã™ãŒã€å˜ã«ãƒªãƒã‚¸ãƒˆãƒªãŒæ¬²ã—ã„ã ã‘ãªã‚‰ VPS ã®ã»ã†ãŒå®‰ã„ã®ã§â€¦
raimon49 2010/11/22
Debian

Git

SSH
ãƒªãƒ³ã‚¯
1