24日 火曜日、友引

+ CESA-2017:0180 Critical CentOS 7 java-1.8.0-openjdk Security Update
https://lwn.net/Alerts/712256/

+ CESA-2017:0180 Critical CentOS 6 java-1.8.0-openjdk Security Update
https://lwn.net/Alerts/712255/

+ phpMyAdmin 4.6.6, 4.4.15.10, 4.0.10.19 released
https://www.phpmyadmin.net/news/2017/1/23/phpmyadmin-466-441510-and-401019-are-released/
https://www.phpmyadmin.net/files/4.6.6/
https://www.phpmyadmin.net/files/4.4.15.10/
https://www.phpmyadmin.net/files/4.0.10.19/

+ UPDATE: Cisco ASR 5000 Software ipsecmgr Process IKE Packet Parsing Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-asr

+ UPDATE: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd

+ UPDATE: JVNVU#94085539 ISC BIND に複数のサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU94085539/index.html

+ PHP 5.6.x / MyBB 1.8.3 Remote Code Execution
https://cxsecurity.com/issue/WLB-2017010184

+ Microsoft Power Point 2016 Java Payload Code Execution
https://cxsecurity.com/issue/WLB-2017010182

+ Linux Kernel CVE-2017-5550 Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/95716
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5550

+ Linux Kernel CVE-2017-5549 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/95715
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5549

+ Linux Kernel CVE-2017-5546 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/95711
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5546

+ Linux Kernel CVE-2017-5551 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/95717
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5551

+ PHP 'ext/pcre/php_pcre.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/95712

+ Linux Kernel CVE-2016-10153 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/95713
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10153

+ Linux Kernel CVE-2016-10154 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/95714
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10154

+ Linux Kernel CVE-2017-5548 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/95710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5548

+ Linux Kernel CVE-2017-5547 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/95709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5547

トレンドマイクロ、IoT機器の脆弱性をクラウドで検知・保護する新サービス
http://itpro.nikkeibp.co.jp/atcl/news/17/012300200/?ST=security&itp_list_theme