windows-update – 构建WSUS服务器：从哪里开始？（自建windows更新服务器）

25-04-25 1

关于windows-update–构建WSUS服务器：从哪里开始？和自建windows更新服务器的问题就给大家分享到这里，感谢你花时间阅读本站内容，更多关于APPLE-SA-2019-3-25-2ma

关于windows-update – 构建WSUS服务器：从哪里开始？和自建windows更新服务器的问题就给大家分享到这里，感谢你花时间阅读本站内容，更多关于APPLE-SA-2019-3-25-2 macOS Mojave 10.14.4,Security Update 2019-002 High Sierra, Security Update 2...、asp.net-mvc – 使用ASP.NET MVC测试驱动的开发 – 从哪里开始？、ASP.NET净零：将 angularJS 升级到 Angular 11 从哪里开始、Batch update returned unexpected row count from update: 0 actual row count: 0 expected: 1等相关知识的信息别忘了在本站进行查找喔。

本文目录一览：

windows-update – 构建WSUS服务器：从哪里开始？（自建windows更新服务器）
APPLE-SA-2019-3-25-2 macOS Mojave 10.14.4,Security Update 2019-002 High Sierra, Security Update 2...
asp.net-mvc – 使用ASP.NET MVC测试驱动的开发 – 从哪里开始？
ASP.NET净零：将 angularJS 升级到 Angular 11 从哪里开始
Batch update returned unexpected row count from update: 0 actual row count: 0 expected: 1

windows-update – 构建WSUS服务器：从哪里开始？（自建windows更新服务器）

我没有让所有的计算机都上网并下载自动更新,而是在认真考虑构建一个WSUS服务器.也就是说,Windows Update服务器.我读过一些文章,但它们很有帮助,但并不完整.以下是我收集的内容：我需要采取的步骤：

>将计算机委托为Windows 2003 Server的服务器.
>安装WSUS软件包并选择要检查的更新类型.
>将我的其余计算机配置为此服务器的客户端.
>将客户端设置为从服务器接收更新.

我的问题如下：

>服务器是否必须运行Windows 2003 Server,或Windows XP Professional是否有效？
>我从哪里下载WSUS软件包？
>如何配置我的计算机以从我的服务器而不是互联网查找更新？

谢谢！！

服务器是否必须运行Windows 2003 Server,或者Windows XP Professional是否有效？

是的,Windows Server是必需的.

我从哪里下载WSUS包？

微软网站：WSUS 3.0

如何配置我的计算机以从我的服务器而不是互联网查找更新？

有一个deployment guide&一本step-by-step指南,详细解释了这一切.执行摘要是：
如果您的计算机是域的成员,则可以使用组策略.
如果您的计算机是独立的,那么您将不得不修改每台计算机的注册表. THis KB涵盖两种情况.

APPLE-SA-2019-3-25-2 macOS Mojave 10.14.4,Security Update 2019-002 High Sierra, Security Update 2...

APPLE-SA-2019-3-25-2 macOS Mojave 10.14.4, Security Update
2019-002 High Sierra, Security Update 2019-002 Sierra

macOS Mojave 10.14.4, Security Update 2019-002 High Sierra,
Security Update 2019-002 Sierra are now available and
addresses the following:

AppleGraphicsControl
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: A malicious application may be able to execute arbitrary code
with kernel privileges
Description: A buffer overflow was addressed with improved size
validation.
CVE-2019-8555: Zhiyi Zhang of 360 ESG Codesafe Team, Zhuo Liang and
shrek_wzw of Qihoo 360 Nirvan Team

Bom
Available for: macOS Mojave 10.14.3
Impact: A malicious application may bypass Gatekeeper checks
Description: This issue was addressed with improved handling of file
metadata.
CVE-2019-6239: Ian Moorhouse and Michael Trimm

CFString
Available for: macOS Mojave 10.14.3
Impact: Processing a maliciously crafted string may lead to a denial
of service
Description: A validation issue was addressed with improved logic.
CVE-2019-8516: SWIPS Team of Frifee Inc.

configd
Available for: macOS Mojave 10.14.3
Impact: A malicious application may be able to elevate privileges
Description: A memory initialization issue was addressed with
improved memory handling.
CVE-2019-8552: Mohamed Ghannam (@_simo36)

Contacts
Available for: macOS Mojave 10.14.3
Impact: A malicious application may be able to elevate privileges
Description: A buffer overflow issue was addressed with improved
memory handling.
CVE-2019-8511: an anonymous researcher

CoreCrypto
Available for: macOS Mojave 10.14.3
Impact: A malicious application may be able to elevate privileges
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2019-8542: an anonymous researcher

DiskArbitration
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: An encrypted volume may be unmounted and remounted by a
different user without prompting for the password
Description: A logic issue was addressed with improved state
management.
CVE-2019-8522: Colin Meginnis (@falc420)

FaceTime
Available for: macOS Mojave 10.14.3
Impact: A user''s video may not be paused in a FaceTime call if they
exit the FaceTime app while the call is ringing
Description: An issue existed in the pausing of FaceTime video. The
issue was resolved with improved logic.
CVE-2019-8550: Lauren Guzniczak of Keystone Academy

Feedback Assistant
Available for: macOS Mojave 10.14.3
Impact: A malicious application may be able to gain root privileges
Description: A race condition was addressed with additional
validation.
CVE-2019-8565: CodeColorist of Ant-Financial LightYear Labs

Feedback Assistant
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: A malicious application may be able to overwrite arbitrary
files
Description: This issue was addressed with improved checks.
CVE-2019-8521: CodeColorist of Ant-Financial LightYear Labs

file
Available for: macOS Mojave 10.14.3
Impact: Processing a maliciously crafted file might disclose user
information
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2019-6237: an anonymous researcher

Graphics Drivers
Available for: macOS Mojave 10.14.3
Impact: An application may be able to read restricted memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2019-8519: Aleksandr Tarasikov (@astarasikov), Juwei Lin
(@panicaII) and Junzhi Lu of Trend Micro Research working with Trend
Micro''s Zero Day Initiative

iAP
Available for: macOS Mojave 10.14.3
Impact: A malicious application may be able to elevate privileges
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2019-8542: an anonymous researcher

IOGraphics
Available for: macOS Mojave 10.14.3
Impact: A Mac may not lock when disconnecting from an external
monitor
Description: A lock handling issue was addressed with improved lock
handling.
CVE-2019-8533: an anonymous researcher, James Eagan of Télécom
ParisTech, R. Scott Kemp of MIT, Romke van Dijk of Z-CERT

IOHIDFamily
Available for: macOS Mojave 10.14.3
Impact: A local user may be able to cause unexpected system
termination or read kernel memory
Description: A memory corruption issue was addressed with improved
state management.
CVE-2019-8545: Adam Donenfeld (@doadam) of the Zimperium zLabs Team

IOKit
Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.3
Impact: A local user may be able to read kernel memory
Description: A memory initialization issue was addressed with
improved memory handling.
CVE-2019-8504: an anonymous researcher

IOKit SCSI
Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A memory corruption issue was addressed with improved
input validation.
CVE-2019-8529: Juwei Lin (@panicaII) of Trend Micro

Kernel
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: A remote attacker may be able to cause unexpected system
termination or corrupt kernel memory
Description: A buffer overflow was addressed with improved size
validation.
CVE-2019-8527: Ned Williamson of Google and derrek (@derrekr6)

Kernel
Available for: macOS Sierra 10.12.6, macOS Mojave 10.14.3
Impact: Mounting a maliciously crafted NFS network share may lead to
arbitrary code execution with system privileges
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2019-8508: Dr. Silvio Cesare of InfoSect

Kernel
Available for: macOS Mojave 10.14.3
Impact: An application may be able to gain elevated privileges
Description: A logic issue was addressed with improved state
management.
CVE-2019-8514: Samuel Groß of Google Project Zero

Kernel
Available for: macOS Sierra 10.12.6, macOS Mojave 10.14.3
Impact: A malicious application may be able to determine kernel
memory layout
Description: A memory initialization issue was addressed with
improved memory handling.
CVE-2019-8540: Weibo Wang (@ma1fan) of Qihoo 360 Nirvan Team

Kernel
Available for: macOS Mojave 10.14.3
Impact: A local user may be able to read kernel memory
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2019-7293: Ned Williamson of Google

Kernel
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: A malicious application may be able to determine kernel
memory layout
Description: An out-of-bounds read issue existed that led to the
disclosure of kernel memory. This was addressed with improved input
validation.
CVE-2019-6207: Weibo Wang of Qihoo 360 Nirvan Team (@ma1fan)
CVE-2019-8510: Stefan Esser of Antid0te UG

Messages
Available for: macOS Mojave 10.14.3
Impact: A local user may be able to view sensitive user information
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2019-8546: ChiYuan Chang

Notes
Available for: macOS Mojave 10.14.3
Impact: A local user may be able to view a user''s locked notes
Description: An access issue was addressed with improved memory
management.
CVE-2019-8537: Greg Walker (gregwalker.us)

PackageKit
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: A malicious application may be able to elevate privileges
Description: A logic issue was addressed with improved validation.
CVE-2019-8561: Jaron Bradley of Crowdstrike

Perl
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: Multiple issues in Perl
Description: Multiple issues in Perl were addressed in this update.
CVE-2018-12015: Jakub Wilk
CVE-2018-18311: Jayakrishna Menon
CVE-2018-18313: Eiichi Tsukata

Power Management
Available for: macOS Mojave 10.14.3
Impact: A malicious application may be able to execute arbitrary code
with system privileges
Description: Multiple input validation issues existed in MIG
generated code. These issues were addressed with improved validation.
CVE-2019-8549: Mohamed Ghannam (@_simo36) of SSD Secure Disclosure
(ssd-disclosure.com)

QuartzCore
Available for: macOS Mojave 10.14.3
Impact: Processing malicious data may lead to unexpected application
termination
Description: Multiple memory corruption issues were addressed with
improved input validation.
CVE-2019-8507: Kai Lu or Fortinet''s FortiGuard Labs

Security
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: An application may be able to gain elevated privileges
Description: A use after free issue was addressed with improved
memory management.
CVE-2019-8526: Linus Henze (pinauten.de)

Security
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: A malicious application may be able to read restricted memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2019-8520: Antonio Groza, The UK''s National Cyber Security Centre
(NCSC)

Siri
Available for: macOS Mojave 10.14.3
Impact: A malicious application may be able to initiate a Dictation
request without user authorization
Description: An API issue existed in the handling of dictation
requests. This issue was addressed with improved validation.
CVE-2019-8502: Luke Deshotels of North Carolina State University,
Jordan Beichler of North Carolina State University, William Enck of
North Carolina State University, Costin Carabaș of University
POLITEHNICA of Bucharest, and Răzvan Deaconescu of University
POLITEHNICA of Bucharest

Time Machine
Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS
Mojave 10.14.3
Impact: A local user may be able to execute arbitrary shell commands
Description: This issue was addressed with improved checks.
CVE-2019-8513: CodeColorist of Ant-Financial LightYear Labs

TrueTypeScaler
Available for: macOS Mojave 10.14.3
Impact: Processing a maliciously crafted font may result in the
disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2019-8517: riusksk of VulWar Corp working with Trend Micro Zero
Day Initiative

XPC
Available for: macOS Sierra 10.12.6, macOS Mojave 10.14.3
Impact: A malicious application may be able to overwrite arbitrary
files
Description: This issue was addressed with improved checks.
CVE-2019-8530: CodeColorist of Ant-Financial LightYear Labs

Additional recognition

Accounts
We would like to acknowledge Milan Stute of Secure Mobile Networking
Lab at Technische Universität Darmstadt for their assistance.

Books
We would like to acknowledge Yiğit Can YILMAZ (@yilmazcanyigit) for
their assistance.

Kernel
We would like to acknowledge Brandon Azad of Google Project Zero for
their assistance.

Mail
We would like to acknowledge Craig Young of Tripwire VERT and Hanno
Böck for their assistance.

Time Machine
We would like to acknowledge CodeColorist of Ant-Financial LightYear
Labs for their assistance.

Installation note:

macOS Mojave 10.14.4, Security Update 2019-002 High Sierra,
Security Update 2019-002 Sierra may be obtained from the
Mac App Store or Apple''s Software Downloads web site:
https://support.apple.com/downloads/

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple''s Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

asp.net-mvc – 使用ASP.NET MVC测试驱动的开发 – 从哪里开始？

我已经阅读了很多关于测试驱动开发(TDD)的知识，我发现基于个人经验非常有吸引力的原则。

目前，我正在开发一个我参与的初创项目的网站，我想尝试将TDD付诸实践。

所以…我在Visual Studio 2010中创建一个空白的解决方案，添加一个ASP.NET MVC网站项目和一个测试项目。

我还添加了一个名为“Domain”的类库，用于我的域对象，并为其添加了一个测试项目。

现在我想知道从哪里开始在做任何事情之前，我应该写一个测试？问题是 – 我应该开始为域对象编写测试吗？如果是这样，究竟应该测试什么，因为域对象还不存在？

或者我应该从网站项目开始，并为此编写测试？如果是这样，我该怎么写一个测试？家庭控制器/索引动作？

解决方法

我通常首先为我要开发的应用程序收集一组故事。从那里我生成一个域模型，通常在“纸”上。我组织了我将要实施的故事，并开始在DB中为第一组故事创建域模型。

一旦我有初始的DB，那么我使用一个ORM，在我的例子中，LINQ to sql，将DB表映射到一组初始类。我通常不会单独测试生成的代码，所以这给了我相当多的代码作为开始的基础。然后我创建一个存根方法，它抛出一个未实现的异常，以实现我正在使用的第一个域类的一个功能。通常，我从验证逻辑开始。一旦你有了存根方法，那么你可以使用VS右键菜单为这个方法创建一个或多个单元测试。然后你就在路上。

一旦我完成了第一个故事的域对象，我就开始使用MVC方面。首先，我将为第一个视图创建视图模型。这些点通常只是一个空的容器类。然后，我将创建视图，并强烈地将其添加到视图模型中。我将开始清理视图，根据视图的需要向视图模型添加属性。请注意，由于视图模型仅仅是一个容器，通常不存在与其相关联的单元测试。然而，它将用于后续的控制器测试。

一旦视图完成(或至少我的初始概念完成)，然后我创建存根控制器动作或动作，同样，存根方法只是抛出一个未实现的异常。这足以让它编译，让我用这些工具为它创建单元测试。我根据需要继续测试方法，并确保其适用于给定输入，并产生适当的视图模型。如果该方法可以产生多个视图模型，即渲染多个视图，我可以遍历创建视图模型/视图/控制器代码的过程，直到故事完成。

必要时重复，直到您的故事实施，一路重构。

ASP.NET净零：将 angularJS 升级到 Angular 11 从哪里开始

如何解决ASP.NET净零：将 angularJS 升级到 Angular 11 从哪里开始

我正在开发一个已经有四年历史并且已经拥有大量功能的 Web 应用程序。我主要开发前端，所以我不太了解 asp .NET 和其他后端的东西。我们决定是时候将前端升级到 Angular 11，因为 AngularJS 的支持即将耗尽。我阅读了很多有关升级到 Angular 11 的信息，因此我知道这将非常乏味，但必须这样做。我们将实施双启动，直到所有内容都移植到 angular 11。但是，我不明白从哪里开始。部分原因是 AngularJS 只需包含 .js 文件即可开始工作。另一方面，Angular 使用 AngularCLI 并且有 Typescript 并且必须被转译。我已经使用过它，知道如何使用 npm 和 AngularCLI。我没有在这个项目中实现 AngularCLI，因为事情太多了：

enter image description here

这些是我们的项目。所有 AngularJS 的东西都在“....Web”解决方案中。问题是，它不是纯 JS 解决方案。有很多 *.cs 文件，我不太明白它们在做什么，还有很多 .cshtml。从这些文件中删除 Razer 不是问题。

我知道项目的前端部分应该是一个自己的存储库，但这还不能完成，因为分离前端不是现在的主要目标，所以我需要在仍然存在的时候实现 Angular 11是此解决方案中的后端内容。

所以如果我想在本地启动这个项目，我必须启动一个 ISS 网络服务器。但是我怎样才能将它与 angularCLI 结合起来呢？我只是不知道从哪里开始。

我尝试删除所有其他解决方案并仅启动 Web 解决方案，但那些 .cs 文件已引用其他解决方案中的类。

如果您需要更多信息，我当然会为您提供更多详细信息和/或屏幕截图！

Batch update returned unexpected row count from update: 0 actual row count: 0 expected: 1

@OneToMany 单向时，保存主体时，出现异常：

Batch update returned unexpected row count from update: 0 actual row count: 0 expected: 1

@OneToMany(fetch=FetchType.EAGER)
@JoinColumn(name="ztid",updatable=false,insertable=false)  
private List<SlrZttp> slrZttps;
public String getZtid(){
    return ztid;
}

并不希望保存从体。

插入 updateble,insertable 异常解决。

本文标签：