1日 月曜日、先負

+ PuTTY 0.69 released
http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html

+ Linux kernel 4.4.65, 3.18.51 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.65
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.51

+ JVNVU#98641178 Ghostscript に任意のコードが実行可能な脆弱性
http://jvn.jp/vu/JVNVU98641178/

+ Apple iOS 10.2 & 10.3 - Control Panel Denial of Service Vulnerability *youtube
https://cxsecurity.com/issue/WLB-2017040199

+ Linux Kernel CVE-2017-7895 Multiple Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/98085
CVE-2017-7895

+ Zabbix CVE-2017-2824 Command Injection Vulnerability
http://www.securityfocus.com/bid/98083
CVE-2017-2824

+ Zimbra Collaboration Suite CVE-2017-7288 Unspecified HTML Injection Vulnerability
http://www.securityfocus.com/bid/98081
CVE-2017-7288

+ Avast! Antivirus CVE-2017-8308 Security Bypass Vulnerability
http://www.securityfocus.com/bid/98084
CVE-2017-8308

ニュース解説
無線LANの「ただ乗り」はやはり罪に問えない？有識者に聞く
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/042800957/?ST=security&itp_list_theme

泥沼化する“証明書抗争”の幕引きなるか、シマンテックがグーグルに逆提案
http://itpro.nikkeibp.co.jp/atcl/news/17/042801325/?ST=security&itp_list_theme

Google tightens noose on HTTP: Chrome to stick 'Not secure' on pages with search fields
http://www.linuxsecurity.com/content/view/171338/169/

pemcracker ? Tool For Cracking PEM Files
http://www.linuxsecurity.com/content/view/171337/169/