6日 月曜日、仏滅

+ psqlodbc 09.06.0100 released
https://www.postgresql.org/ftp/odbc/versions/msi/

+ CESA-2017:0238 Important CentOS 5 thunderbird Security Update
https://lwn.net/Alerts/713528/

+ CESA-2017:0238 Important CentOS 6 thunderbird Security Update
https://lwn.net/Alerts/713527/

+ CESA-2017:0238 Important CentOS 7 thunderbird Security Update
https://lwn.net/Alerts/713526/

+ Cisco WebEx Browser Extension Remote Code Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170124-webex
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3823

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: January 2017
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170130-openssl

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl

+ Linux kernel 4.9.8, 4.4.47 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.8
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.47

+ SA75174 Hitachi Multiple Cosminexus / uCosminexus Products Multiple Denial of Service Vulnerabilities
https://secuniaresearch.flexerasoftware.com/advisories/75174/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610

+ hitachi-sec-2017-103 Multiple Vulnerabilities in Cosminexus HTTP Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-103/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610

+ hitachi-sec-2017-102 Multiple Vulnerabilities in Cosminexus HTTP Server and Hitachi Web Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-102/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0924
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306

+ hitachi-sec-2017-103 Cosminexus HTTP Serverにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-103/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610

+ hitachi-sec-2017-102 Cosminexus HTTP Server, Hitachi Web Serverにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-102/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0924
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306

+ Apache Struts 2.5.10 released
http://struts.apache.org/docs/version-notes-2510.html

+ glibc 2.25 released
https://sourceware.org/ml/libc-alpha/2017-02/msg00079.html

+ JVNVU#95841181 Microsoft Windows の SMB Tree Connect Response パケットの処理にメモリ破損の脆弱性
http://jvn.jp/vu/JVNVU95841181/

+ McAfee ePolicy Orchestrator Lets Remote Users Inject SQL Commands
http://www.securitytracker.com/id/1037777
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8027

JVN#21114208 Android アプリ「ビジネスLaLa Call」における SSL サーバ証明書の検証不備の脆弱性
http://jvn.jp/jp/JVN21114208/

JVN#01014759 Android アプリ「LaLa Call」における SSL サーバ証明書の検証不備の脆弱性
http://jvn.jp/jp/JVN01014759/

ニュース解説
資生堂子会社のECサイト、無いはずのカード情報が漏れた原因とは
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/020300804/?ST=security&itp_list_theme

カスペルスキー、法人向け仮想化環境用セキュリティ製品の最新版
http://itpro.nikkeibp.co.jp/atcl/news/17/020300375/?ST=security&itp_list_theme

ラック、日本の“セキュリティご意見番”である西本逸郎氏が社長昇格
http://itpro.nikkeibp.co.jp/atcl/news/17/020300373/?ST=security&itp_list_theme

ニュース解説
「忘れられる権利」を問わなかった最高裁決定の意味と、グーグルの安堵
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/020300805/?ST=security&itp_list_theme

IT予算560億円の成果は？リオ五輪のセキュリティ責任者らが語る
http://itpro.nikkeibp.co.jp/atcl/news/17/020300371/?ST=security&itp_list_theme