14日 金曜日、先勝

+ CESA-2017:1723 Important CentOS 6 kernel Security Update
https://lwn.net/Alerts/727800/

+ CESA-2017:1721 Moderate CentOS 6 httpd Security Update
https://lwn.net/Alerts/727799/

+ FreeBSD-SA-17:05.heimdal heimdal KDC-REP service name validation vulnerability
https://www.freebsd.org/security/advisories/FreeBSD-SA-17:05.heimdal.asc

+ Oracle Critical Patch Update Pre-Release Announcement - July 2017
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

+ S2-049 A DoS attack is available for Spring secured actions
http://struts.apache.org/docs/s2-049.html

+ Apache Struts 2.5.12 released
http://struts.apache.org/announce.html#a20170717

+ Apache mod_http2 Memory Access Error Lets Remote Users Deny Service
http://www.securitytracker.com/id/1038907
CVE-2017-9789

+ Apache mod_auth_digest Uninitialized Memory Error Lets Remote Users Obtain Potentially Sensitive Information and Deny Service
http://www.securitytracker.com/id/1038906
CVE-2017-9788

+ GNU Binutils CVE-2017-9955 Multiple Heap Based Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/99573
CVE-2017-9955

+ Trend Micro Deep Discovery Director Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/99570

+ Apache HTTP Server CVE-2017-9789 Denial of Service Vulnerability
http://www.securityfocus.com/bid/99568
CVE-2017-9789

+ Apache Struts CVE-2017-7672 Denial of Service Vulnerability
http://www.securityfocus.com/bid/99563
CVE-2017-7672

+ Apache Struts Spring AOP Functionality Denial of Service Vulnerability
http://www.securityfocus.com/bid/99562

+ Juniper Junos CVE-2017-2344 Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/99556
CVE-2017-2344

PostgreSQL 10 Beta 2 Released
https://www.postgresql.org/about/news/1763/

JVNDB-2017-000172 FileCapsule Deluxe Portable および FileCapsule Deluxe Portable で作成された自己復号形式の暗号ファイルにおける DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000172.html

Windows 10のセキュリティ
Windows 10の「Device Guard」、信頼できるコードだけ実行してウイルス感染を防ぐ
http://itpro.nikkeibp.co.jp/atcl/column/17/062600259/062600005/?ST=security&itp_list_theme

週末に遊べるラズパイ
ラズパイで脆弱性を調査、セキュリティ検査が可能な「Kali Linux」
http://itpro.nikkeibp.co.jp/atcl/column/17/041900152/071200015/?ST=security&itp_list_theme

How Active Intrusion Detection Can Seek and Block Attacks
http://www.linuxsecurity.com/content/view/172152/169/