27日 月曜日、先勝

+ Linux kernel 4.10.6, 4.9.18, 4.4.57 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.6
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.18
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.57

+ UPDATE: JVNVU#93610402 Apache Struts2 に任意のコードが実行可能な脆弱性
http://jvn.jp/vu/JVNVU93610402/

+ NetBSD Xen-amd64 Port Logic Error Lets Local Users on a Guest System Gain Elevated Privileges on the Host System
http://www.securitytracker.com/id/1038127

+ Trend Micro InterScan Messaging Security Input Validation Flaw in DetailReportAction Lets Remote Authenticated Users Traverse the Directory to View Arbitrary Files on the Target System
http://www.securitytracker.com/id/1038125

+ ntp Multiple Bugs Let Remote or Local Users Cause the Target Service to Crash
http://www.securitytracker.com/id/1038123
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9042
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6451
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6452
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6455
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6458
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6459
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6460
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6462
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6463
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6464

AIでサイバー攻撃は防げるか
無休で働き学び続けるAIはセキュリティ対策に向いている
http://itpro.nikkeibp.co.jp/atcl/column/17/031600083/032300001/?ST=security&itp_list_theme

三菱電機ビルテクノ、ビルのトラブルをスマホ動画で確認するクラウドサービス
http://itpro.nikkeibp.co.jp/atcl/news/17/032400931/?ST=security&itp_list_theme

JINSのWebサイトにStruts2の脆弱性突く不正アクセス、4年前にもStruts2で被害
http://itpro.nikkeibp.co.jp/atcl/news/17/032400930/?ST=security&itp_list_theme

WikiLeaks、新たなCIA機密文書公開でApple製品への侵入手段が明らかに
http://itpro.nikkeibp.co.jp/atcl/news/17/032400919/?ST=security&itp_list_theme

Linux Advisory Watch: March 24th, 2017
http://www.linuxsecurity.com/content/view/171106/187/

Google proposes sending Symantec to TLS sin bin
http://www.linuxsecurity.com/content/view/171105/169/

FBI director floats international framework on access to encrypted data
http://www.linuxsecurity.com/content/view/171104/169/