29日 月曜日、友引

+ CESA-2017:1308 Important CentOS 7 kernel Security Update
https://lwn.net/Alerts/723896/

+ phpMyAdmin 4.7.1 is released
https://www.phpmyadmin.net/news/2017/5/26/phpmyadmin-471-released/

+ OpenSSL 1.1.0f is now available
https://www.openssl.org/

+ Windows NTFS '$MFT' Device Access Lets Remote Users Cause the Target System to Crash
http://www.securitytracker.com/id/1038575

+ Microsoft Malware Protection Engine File Processing Flaws Let Remote Users Deny Service and Execute Arbitrary Code
http://www.securitytracker.com/id/1038571
CVE-2017-8535
CVE-2017-8536
CVE-2017-8537
CVE-2017-8538
CVE-2017-8539
CVE-2017-8540
CVE-2017-8541
CVE-2017-8542

+ Samba is_known_pipename() Arbitrary Module Load
https://cxsecurity.com/issue/WLB-2017050209
CVE-2017-7494

+ Veritas Backup Exec Remote Agent For Windows Use-After-Free
https://cxsecurity.com/issue/WLB-2017050199

+ OpenVPN Access Server 2.1.4 CRLF Injection
https://cxsecurity.com/issue/WLB-2017050197

+ Microsoft MsMpEng Multiple Problems Handling ntdll!NtControlChannel Commands
https://cxsecurity.com/issue/WLB-2017050192

+ Samba 3.5.0 Remote Code Execution
https://cxsecurity.com/issue/WLB-2017050187
CVE-2017-7494

+ Trend Micro ServerProtect Disclosure / CSRF / XSS
https://cxsecurity.com/issue/WLB-2017050186
CVE-2017-9037
CVE-2017-9036
CVE-2017-9035
CVE-2017-9034
CVE-2017-9033
CVE-2017-9032

+ Samba CVE-2017-7494 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/98636
CVE-2017-7494

JVNDB-2017-000102 商業登記電子認証ソフトのインストーラにおける DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000102.html

ダウンロードフォルダーからのインストールは危険、JVNが注意喚起
http://itpro.nikkeibp.co.jp/atcl/news/17/052601516/?ST=security&itp_list_theme

Linux Advisory Watch: May 26th, 2017
http://www.linuxsecurity.com/content/view/171591/187/

Democracy-minded DEF CON hackers promise punishing probe on US election computers
http://www.linuxsecurity.com/content/view/171589/169/

Samba exploit ? not quite WannaCry for Linux, but patch anyway!
http://www.linuxsecurity.com/content/view/171588/169/