15日 木曜日、先勝

+ RHSA-2017:1440 Critical: firefox security update
https://access.redhat.com/errata/RHSA-2017:1440
CVE-2017-5470
CVE-2017-5472
CVE-2017-7749
CVE-2017-7750
CVE-2017-7751
CVE-2017-7752
CVE-2017-7754
CVE-2017-7756
CVE-2017-7757
CVE-2017-7758
CVE-2017-7764
CVE-2017-7771
CVE-2017-7772
CVE-2017-7773
CVE-2017-7774
CVE-2017-7775
CVE-2017-7776
CVE-2017-7777
CVE-2017-7778

+ CESA-2017:1430 Important CentOS 7 qemu-kvm Security Update
https://lwn.net/Alerts/725357/

+ Mozilla Thunderbird 52.2.0 released
https://www.mozilla.org/en-US/thunderbird/52.2.0/releasenotes/

+ Linux kernel 4.11.5, 4.9.32, 4.4.72, 3.18.57 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.32
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.72
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.57

+ ISC BIND 9.11.1-P1, 9.10.5-P1, 9.9.10-P1 released
http://ftp.isc.org/isc/bind9/9.11.1-P1/RELEASE-NOTES-bind-9.11.1-P1.html
http://ftp.isc.org/isc/bind9/9.10.5-P1/RELEASE-NOTES-bind-9.10.5-P1.html
http://ftp.isc.org/isc/bind9/9.9.10-P1/RELEASE-NOTES-bind-9.9.10-P1.html

+ Postfix stable release 3.2.2 and legacy releases 3.1.6, 3.0.10 and 2.11.10
http://www.postfix.org/announcements/postfix-3.2.2.html

UPDATE: JVN#01014759 Android アプリ「LaLa Call」における SSL サーバ証明書の検証不備の脆弱性
http://jvn.jp/jp/JVN01014759/index.html

IoT時代の最新SELinux入門
わかりにくいSELinuxセキュリティの勘所を図で理解
http://itpro.nikkeibp.co.jp/atcl/column/17/041900153/052500002/?ST=security&itp_list_theme

「もう絶望しない」、トイレ空き状況がリアルタイムで分かる小田急線新宿駅
http://itpro.nikkeibp.co.jp/atcl/news/17/061401651/?ST=security&itp_list_theme

The 15 worst data security breaches of the 21st Century
http://www.linuxsecurity.com/content/view/171774/169/

DevSecOps is Not a Security Panacea
http://www.linuxsecurity.com/content/view/171773/169/

BlackArch Linux Ethical Hacking and Pen Testing OS Now Offers over 1,800 Tools
http://www.linuxsecurity.com/content/view/171772/169/