16日 月曜日、赤口

+ Android-x86 6.0-r2 (Marshmallow-x86) released
http://www.android-x86.org/releases/releasenote-6-0-r2

+ collabtive 3.0.1 released
http://collabtive.o-dyn.de/

+ CESA-2017:0036 Important CentOS 6 kernel Security Update
https://lwn.net/Alerts/711554/

+ CESA-2017:0061 Important CentOS 5 java-1.6.0-openjdk Security Update
https://lwn.net/Alerts/711553/

+ CESA-2017:0061 Important CentOS 6 java-1.6.0-openjdk Security Update
https://lwn.net/Alerts/711552/

+ CESA-2017:0061 Important CentOS 7 java-1.6.0-openjdk Security Update
https://lwn.net/Alerts/711551/

+ Linux kernel 4.9.4, 4.4.43 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.43

+ Sudo 1.8.19p2 released
https://www.sudo.ws/stable.html#1.8.19p2

+ Apache HTTP Server 2.2.32 Released
http://www.apache.org/dist/httpd/Announcement2.2.html

+ ProFTPD 1.3.5c released
http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5c

+ Sysstat 11.4.3, 11.2.9 released
http://sebastien.godard.pagesperso-orange.fr/

+ zlib 1.2.11 released
http://www.zlib.net/

+ UPDATE: JVNVU#94085539 ISC BIND に複数のサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU94085539/index.html

+ UPDATE: JVNVU#97321122 Apache Tomcat に情報漏えいの脆弱性
http://jvn.jp/vu/JVNVU97321122/index.html

+ Mozilla Firefox < 50.1.0 - Use After Free
https://cxsecurity.com/issue/WLB-2017010092
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899

+ Zabbix CVE-2016-10134 SQL Injection Vulnerability
http://www.securityfocus.com/bid/95423
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10134

VU#865216 CodeLathe FileCloud is vulnerable to cross-site request forgery
https://www.kb.cert.org/vuls/id/865216

ネットワークの素朴な疑問
ダークウェブって何？
http://itpro.nikkeibp.co.jp/atcl/column/17/010600003/010600001/?ST=security&itp_list_theme

日本HP社長、「2017年は没入型コンピュータや3Dプリンター事業に期待」
http://itpro.nikkeibp.co.jp/atcl/news/17/011300092/?ST=security&itp_list_theme