26日 月曜日、先勝

+ CESA-2017:1574 Moderate CentOS 7 sudo Security Update
https://lwn.net/Alerts/726307/

+ CESA-2016:2872 Moderate CentOS 7 sudo Security Update
https://lwn.net/Alerts/726309/

+ CESA-2017:1574 Moderate CentOS 6 sudo Security Update
https://lwn.net/Alerts/726308/

+ Mozilla Thunderbird 52.2.1 released
https://www.mozilla.org/en-US/thunderbird/52.2.1/releasenotes/

+ VMware Workstation 12 Player Version 12.5.7 Released
http://pubs.vmware.com/Release_Notes/en/workstation/12/player-1257-release-notes.html

+ Linux kernel 4.11.7, 4.9.34 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.7
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.34

+ hitachi-sec-2017-116 Vulnerability in Cosminexus HTTP Server and Hitachi Web Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-116/index.html
CVE-2016-8743

+ hitachi-sec-2017-115 Multiple Vulnerabilities in Cosminexus HTTP Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-115/index.html
CVE-2016-7055
CVE-2017-3731
CVE-2017-3732

+ hitachi-sec-2017-116 Cosminexus HTTP Server, Hitachi Web Serverにおける脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-116/index.html
CVE-2016-8743

+ hitachi-sec-2017-115 Cosminexus HTTP Serverにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-115/index.html
CVE-2016-7055
CVE-2017-3731
CVE-2017-3732

+ Symantec Messaging Gateway Multiple Flaws Let Remote Users Bypass Security Restrictions and Execute Arbitrary Code
http://www.securitytracker.com/id/1038785
CVE-2017-6324
CVE-2017-6325
CVE-2017-6326

+ Microsoft Windows Defender File Processing Flaw in Malware Protection Engine Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1038784
CVE-2017-8558

+ Microsoft Forefront Endpoint Protection File Processing Flaw in Microsoft Malware Protection Engine Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1038783
CVE-2017-8558

+ Microsoft Edge CssParser::RecordProperty Type Confusion
https://cxsecurity.com/issue/WLB-2017060188
CVE-2017-8496

+ Symantec Messaging Gateway Remote Code Execution
https://cxsecurity.com/issue/WLB-2017060186

+ Linux Kernel CVE-2017-7518 Privilage Escalation Vulnerability
http://www.securityfocus.com/bid/99263
CVE-2017-7518

+ Microsoft Malware Protection Engine CVE-2017-8558 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/99262
CVE-2017-8558

+ NetBSD CVE-2017-1000378 Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/99255
CVE-2017-1000378

JVNDB-2017-000142 キャラミんOMP のインストーラにおける任意の DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000142.html

辻伸弘の裏読みセキュリティ事件簿
どんなパソコンが感染したのか、WannaCryを再検証
http://itpro.nikkeibp.co.jp/atcl/column/16/012900025/062300042/?ST=security&itp_list_theme

ニュース解説
初のセキュリティ国家資格試験、「講習義務付け」で敬遠されたか？
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/062201027/?ST=security&itp_list_theme

趙 章恩「Korea on the Web」
ランサムウエア身代金に1億3000万円払った韓国IT企業、データは戻ったか
http://itpro.nikkeibp.co.jp/atcl/column/14/549762/062200152/?ST=security&itp_list_theme

国内大手のセキュリティ人材育成
「セキュリティの分からないSE」はもういらない？富士通の1万人計画
http://itpro.nikkeibp.co.jp/atcl/column/17/062200255/062200001/?ST=security&itp_list_theme

ラックとMSがIDセキュリティの推進団体、「Azure利用は前提としない」
http://itpro.nikkeibp.co.jp/atcl/news/17/062301751/?ST=security&itp_list_theme

［特報］NTTがセキュリティ人材を3万人育成、2020年までの目標値の3倍達成
http://itpro.nikkeibp.co.jp/atcl/news/17/062201735/?ST=security&itp_list_theme

Linux Advisory Watch: June 23rd, 2017
http://www.linuxsecurity.com/content/view/171905/187/

Researcher calls the fuzz on OpenVPN, uncovers crashy vulns
http://www.linuxsecurity.com/content/view/171904/169/

8 Hot Hacking Tools to Come out of Black Hat USA
http://www.linuxsecurity.com/content/view/171903/169/