27日 月曜日、先負

+ RHSA-2017:0323 Important: kernel security update
https://rhn.redhat.com/errata/RHSA-2017-0323.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2634
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074

+ CESA-2017:0323 Important CentOS 5 kernel Security Update
https://lwn.net/Alerts/715689/

+ CESA-2017:0307 Moderate CentOS 6 kernel Security Update
https://lwn.net/Alerts/715674/

+ CESA-2017:0309 Important CentOS 6 qemu-kvm Security Update
https://lwn.net/Alerts/715675/

+ curl 7.53.1 released
https://curl.haxx.se/changes.html#7_53_1

+ SSL_VERIFYSTATUS ignored
https://curl.haxx.se/docs/adv_20170222.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2629

+ Linux kernel 4.10.1, 4.9.13, 4.4.52 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.1
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.52

+ SA75549 Microsoft Edge "HandleColumnBreakOnColumnSpanningElement()" Type Confusion Vulnerability
https://secuniaresearch.flexerasoftware.com/advisories/75549/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0037

+ SA75547 Microsoft Internet Explorer "HandleColumnBreakOnColumnSpanningElement()" Type Confusion Vulnerability
https://secuniaresearch.flexerasoftware.com/advisories/75547/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0037

+ Dovecot 2.2.28 released
http://www.dovecot.org/list/dovecot-news/2017-February/000337.html

+ Microsoft Edge Type Confusion Error in HandleColumnBreakOnColumnSpanningElement() May Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1037906
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0037

+ Microsoft Internet Explorer Type Confusion Error in HandleColumnBreakOnColumnSpanningElement() May Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1037905
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0037

+ Ghostscript Use-after-Free Memory Errors Let Remote Users Cause the Target Application to Crash
http://www.securitytracker.com/id/1037899
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6196

+ Linux Kernel tcp_splice_read() Infinite Loop Lets Remote Consume Excessive CPU Resources on the Target System
http://www.securitytracker.com/id/1037897
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6214

+ Trend Micro InterScan Messaging Security (Virtual Appliance) Remote Code Execution
https://cxsecurity.com/issue/WLB-2017020253

+ Microsoft Edge / Internet Explorer HandleColumnBreakOnColumnSpanningElement Type Confusion
https://cxsecurity.com/issue/WLB-2017020234
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0037

記者の眼
クッキーやセクシー画像にも潜んでいる、ウイルスの怪しい通信の隠し方
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/022200783/?ST=security&itp_list_theme

イスラエルレポート
イスラエルがセキュリティでカネを集められる理由
http://itpro.nikkeibp.co.jp/atcl/column/17/022000038/022200004/?ST=security&itp_list_theme

経営の本音
「優秀な人材が出ていくのは悔しいけれど…」、ラック次期社長（中）
http://itpro.nikkeibp.co.jp/atcl/column/16/113000287/022400025/?ST=security&itp_list_theme

アズム、ICカードでデスクトップを呼び出せるシンクライアント
http://itpro.nikkeibp.co.jp/atcl/news/17/022400620/?ST=security&itp_list_theme

ソースネクスト、無期限で使えるパスワード管理サービス
http://itpro.nikkeibp.co.jp/atcl/news/17/022400619/?ST=security&itp_list_theme

個人データの保管・流通を担う「情報銀行」、政府が中間とりまとめへ
http://itpro.nikkeibp.co.jp/atcl/news/17/022400616/?ST=security&itp_list_theme

ついに破られた「SHA-1」、Googleが衝突攻撃に成功
http://itpro.nikkeibp.co.jp/atcl/news/17/022400615/?ST=security&itp_list_theme