23日 木曜日、先負

+ 2017 年 2 月のマイクロソフト セキュリティ情報の概要
https://technet.microsoft.com/ja-jp/library/security/ms17-feb

+ RHSA-2017:0293 Important: kernel security update
https://rhn.redhat.com/errata/RHSA-2017-0293.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074

+ RHSA-2017:0294 Important: kernel security update
https://rhn.redhat.com/errata/RHSA-2017-0294.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074

+ CESA-2017:0190 Critical CentOS 7 firefox Security Update
https://lwn.net/Alerts/715247/

+ CESA-2017:0190 Critical CentOS 6 firefox Security Update
https://lwn.net/Alerts/715246/

+ CESA-2017:0190 Critical CentOS 5 firefox Security Update
https://lwn.net/Alerts/715245/

+ curl 7.53.0 released
https://curl.haxx.se/changes.html#7_53_0

+ SA75500 Microsoft Windows Adobe Flash Player Multiple Vulnerabilities
https://secuniaresearch.flexerasoftware.com/advisories/75500/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2982
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2984
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2985
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2986
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2987
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2988
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2990
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2991
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2992
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2993
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2994
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2995
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2996

+ Linux Kernel DCCP Double-Free Memory Error Lets Local Users Obtain Root Privileges
http://www.securitytracker.com/id/1037876
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074

+ cURL OCSP Stapling Verification Bug Lets Remote Users Bypass CURLOPT_SSL_VERIFYSTATUS Security Restrictions on the Target System
http://www.securitytracker.com/id/1037871
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2629

+ Microsoft Office PowerPoint 2010 MSO/OART Heap Out-of-Bounds Access
https://cxsecurity.com/issue/WLB-2017020205

+ Microsoft Office PowerPoint 2010 'MSO!Ordinal5429' Missing Length Check Heap Corruption
https://cxsecurity.com/issue/WLB-2017020204

+ Microsoft Office PowerPoint 2010 GDI 'GDI32!ConvertDxArray' Insufficient Bounds Check
https://cxsecurity.com/issue/WLB-2017020203

UPDATE: JVNVU#99002156 Apple GarageBand および Logic Pro X の脆弱性に対するアップデート
http://jvn.jp/vu/JVNVU99002156/index.html

セキュリティ国家試験、解けますか？
デジタル証明書や認証局における「CRL」の役割って？
http://itpro.nikkeibp.co.jp/atcl/column/17/021700034/021700004/?ST=security&itp_list_theme

社長に「よし、分かった」と言わせるセキュリティ会話術
「マルウエア」では通じない、プロトコルを合わせよう
http://itpro.nikkeibp.co.jp/atcl/column/17/021400032/021400001/?ST=security&itp_list_theme