1日 木曜日、大安

+ UPDATE: Cisco Integrated Management Controller Remote Code Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3

+ UPDATE: Cisco Integrated Management Controller Privilege Escalation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc

+ UPDATE: Vulnerability in Linux Kernel Affecting Cisco Products: October 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux

+ UPDATE: Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc1

+ UPDATE: Cisco Integrated Management Controller User Session Hijacking Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc2

+ sudo 1.8.20p2 released
https://www.sudo.ws/stable.html#1.8.20p2

+ OpenLDAP Double Free Memory Error Lets Remote Authenticated Users Cause the Target slapd Service to Crash
http://www.securitytracker.com/id/1038591
CVE-2017-9287

+ OpenLDAP 'servers/slapd/back-mdb/search.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/98736
CVE-2017-9287

+ Sudo '/src/ttyname.c' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/98745
CVE-2017-1000367

New versions of MSSQL-to-PostgreSQL and Oracle-to-PostgreSQL have been released
https://www.postgresql.org/about/news/1751/

AWS Summit Tokyo 2017レポート
AWS採用を前提に整備、シャドーITから始まったKDDIのクラウド統制
http://itpro.nikkeibp.co.jp/atcl/column/17/052600214/053100004/?ST=security&itp_list_theme

Shadow Brokers lay out pitch ? and name price ? for monthly zero-day subscription service
http://www.linuxsecurity.com/content/view/171635/169/

Blockchains are the new Linux, not the new internet
http://www.linuxsecurity.com/content/view/171634/169/