19日 月曜日、大安

+ MantisBT 2.5.1, 2.5.0 and 2.4.2 released
http://www.mantisbt.org/blog/?p=529

+ Linux kernel 4.11.6, 4.9.33, 4.4.73 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.6
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.33
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.73

+ Apache HTTP Server 2.4.26 Released
http://www.apache.org/dist/httpd/Announcement2.4.html

+ Sudo get_process_ttyname() Privilege Escalation
https://cxsecurity.com/issue/WLB-2017060118
CVE-2017-1000367

+ Wireshark MP4/DAAP Dissector Bugs Let Remote Users Consume Excessive Memory Resources
http://www.securitytracker.com/id/1038706
CVE-2017-9616
CVE-2017-9617

+ Microsoft Windows OLE 'olecnv32.dll' File Processing Flaw Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1038702
CVE-2017-8487

+ Windows RPC Request Processing Bug in Routing and Remote Access Service Lets Remote Users Execute Arbitrary Code on the Target System
http://www.securitytracker.com/id/1038701
CVE-2017-8461

+ Linux Kernel 'drivers/gpu/drm/vmwgfx/vmwgfx_surface.c' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/99095
CVE-2017-9605

JVNVU#99188315 Samsung Magician に更新がセキュアに行われない脆弱性
http://jvn.jp/vu/JVNVU99188315/

セキュリティ診断のイロハ
自分でもできる！サーバーのセキュリティ診断
http://itpro.nikkeibp.co.jp/atcl/column/17/061600244/061600001/?ST=security&itp_list_theme

Google、Yahoo、Appleのフィッシングサイトが急増、ウェブルートの脅威レポート
http://itpro.nikkeibp.co.jp/atcl/news/17/061601684/?ST=security&itp_list_theme

Facebook、テロ関連コンテンツ対策にもAIを活用
http://itpro.nikkeibp.co.jp/atcl/news/17/061601681/?ST=security&itp_list_theme

Linux Advisory Watch: June 16th, 2017
http://www.linuxsecurity.com/content/view/171801/187/

Brit hacker admits he siphoned info from US military satellite network
http://www.linuxsecurity.com/content/view/171800/169/

CIA has been hacking into Wi-Fi routers for years, leaked documents show
http://www.linuxsecurity.com/content/view/171799/169/