20日 金曜日、仏滅

+ CESA-2017:0086 Important CentOS 7 kernel Security Update
https://lwn.net/Alerts/712042/

+ UPDATE: Cisco Unified Communications Manager Web Interface Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucm1

+ UPDATE: Cisco Email Security Appliance Filter Bypass Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-esa

+ PHP 7.1.1, 7.0.15, 5.6.30 Released
http://www.php.net/ChangeLog-7.php#7.1.1
http://www.php.net/ChangeLog-7.php#7.0.15
http://www.php.net/ChangeLog-5.php#5.6.30

+ McAfee ePolicy Orchestrator Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1037628
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3902

+ Java SE Mission Control Insecure Transport MITM
https://cxsecurity.com/issue/WLB-2017010155

+ Android fps sysfs Entry Buffer Overflow
https://cxsecurity.com/issue/WLB-2017010150

+ Android sec_ts Touchscreen Race Condition
https://cxsecurity.com/issue/WLB-2017010149

データは語る
IT市場の“東京一極集中”が鮮明に、地方は3%のマイナス成長
http://itpro.nikkeibp.co.jp/atcl/column/16/072600158/011900025/?ST=security&itp_list_theme

JVNVU#90290095 Apple GarageBand および Logic Pro X の脆弱性に対するアップデート
http://jvn.jp/vu/JVNVU90290095/

JVNVU#91417143 GigaCC OFFICE における複数の脆弱性
http://jvn.jp/vu/JVNVU91417143/