2日 火曜日、仏滅

+ MantisBT 2.4.0, 2.3.2 released
http://www.mantisbt.org/blog/?p=521

+ Mozilla Thunderbird 52.1.0 released
https://www.mozilla.org/en-US/thunderbird/52.1.0/releasenotes/

+ Mozilla Foundation Security Advisory 2017-13 Security vulnerabilities fixed in Thunderbird 52.1
https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/
CVE-2017-5433
CVE-2017-5435
CVE-2017-5436
CVE-2017-5461
CVE-2017-5459
CVE-2017-5466
CVE-2017-5434
CVE-2017-5432
CVE-2017-5460
CVE-2017-5438
CVE-2017-5439
CVE-2017-5440
CVE-2017-5441
CVE-2017-5442
CVE-2017-5464
CVE-2017-5443
CVE-2017-5444
CVE-2017-5446
CVE-2017-5447
CVE-2017-5465
CVE-2016-10196
CVE-2017-5454
CVE-2017-5469
CVE-2017-5445
CVE-2017-5449
CVE-2017-5451
CVE-2017-5462
CVE-2017-5467
CVE-2017-5430
CVE-2017-5429

+ FreeBSD-SA-17:04.ipfilter ipfilter(4) fragment handling panic
https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc
CVE-2017-1081

+ Zabbix Proxy Server CVE-2017-2825 Man in the Middle Security Bypass Vulnerability
http://www.securityfocus.com/bid/98094
CVE-2017-2825

+ FreeBSD CVE-2017-1081 Use After Free Denial of Service Vulnerability
http://www.securityfocus.com/bid/98089
CVE-2017-1081

+ Linux Kernel CVE-2017-7895 Multiple Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/98085
CVE-2017-7895

+ Zabbix CVE-2017-2824 Command Injection Vulnerability
http://www.securityfocus.com/bid/98083
CVE-2017-2824

Linux Security Week: May 1st, 2017
http://www.linuxsecurity.com/content/view/171353/187/

Russian-controlled telecom hijacks financial services’ Internet traffic
http://www.linuxsecurity.com/content/view/171352/169/

A VPN will not save you from government surveillance
http://www.linuxsecurity.com/content/view/171351/169/

Hacker Arrested for Stealing $100 Million from Facebook and Google
http://www.linuxsecurity.com/content/view/171350/169/