31日 金曜日、赤口

+ Linux kernel 4.10.7, 4.9.19, 4.4.58 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.19
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.58

+ ActivePerl 5.24.1.2402, 5.22.3.2204 released
http://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242259.html

+ Linux Kernel Out-of-Bounds Memory Error in XFRM xfrm_replay_verify_len() Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1038166
CVE-2017-7184

+ RSA Archer GRC Security Operations Management Logging Function Lets Local Users View Passwords
http://www.securitytracker.com/id/1038162
CVE-2017-4977

+ Trend Micro InterScan Web Security Virtual Appliance Unspecified Flaws Let Remote Users Execute Arbitrary Code on the Target System
http://www.securitytracker.com/id/1038161

JVNDB-2017-000044 CentreCOM AR260S V2 における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000044.html

データは語る
IoT機器を探す不審な通信は前年比2倍に
http://itpro.nikkeibp.co.jp/atcl/column/16/072600158/033000039/?ST=security&itp_list_theme

セキュリティ人材、「IT部門に6年いたら終わり」
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/032800809/?ST=security&itp_list_theme

APT29 Domain Fronting With TOR
http://www.linuxsecurity.com/content/view/171127/169/

Someone is putting lots of work into hacking Github developers
http://www.linuxsecurity.com/content/view/171126/169/

VMware patches critical virtual machine escape flaws
http://www.linuxsecurity.com/content/view/171125/169/