18日 火曜日、大安

+ PHP SQL Driver 4.3 released
https://docs.microsoft.com/ja-jp/sql/connect/php/release-notes-for-the-php-sql-driver#whats-new-in-version-43

+ nginx 1.13.3, 1.12.1 released
http://nginx.org/

+ nginx security advisory (CVE-2017-7529)
http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html?_ga=2.208790229.650178054.1500335569-1084684068.1410134581
CVE-2017-7529

+ Cisco WebEx Browser Extension Remote Code Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170717-webex
CVE-2017-6753

+ Linux kernel 4.12.2, 4.11.11, 4.9.38, 4.4.77, 3.18.61 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.2
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.11
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.38
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.77
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.61

+ Apache Struts 2.3.33 released
http://struts.apache.org/announce.html#a20170707

+ JVNVU#92256772 Apache HTTP Web Server における複数の脆弱性に対するアップデート
http://jvn.jp/vu/JVNVU92256772/
CVE-2017-9788
CVE-2017-9789

+ Microsoft Windows COM Session Moniker Privilege Escalation
https://cxsecurity.com/issue/WLB-2017070108
CVE-2017-0298
CVE-2017-0100

JVNDB-2017-000174 アタッシェケースで作成された自己実行可能形式の暗号化ファイルにおける DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000174.html

企業セキュリティ、七つの鉄則
WannaCryも退けられた？脆弱性診断で弱点を知る
http://itpro.nikkeibp.co.jp/atcl/column/17/062200257/070700003/?ST=security&itp_list_theme

JVNVU#93377948 AssetView for MacOS の「ファイル転送Webサービス」に複数の脆弱性
http://jvn.jp/vu/JVNVU93377948/

JVN#61502349 アタッシェケースで作成された自己実行可能形式の暗号化ファイルにおける DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN61502349/

VU#489392 Acronis True Image fails to update itself securely
http://www.kb.cert.org/vuls/id/489392

Linux Security Week: July 17th, 2017
http://www.linuxsecurity.com/content/view/172219/187/

Unix: How random is random?
http://www.linuxsecurity.com/content/view/172218/169/

White House released voter-fraud commenters' sensitive personal information
http://www.linuxsecurity.com/content/view/172217/169/

Want to kill your IT security team? Put the top hacker in charge
http://www.linuxsecurity.com/content/view/172216/169/

Linux Advisory Watch: July 14th, 2017
http://www.linuxsecurity.com/content/view/172183/187/

Black Hat to Host Discussion on Diversity
http://www.linuxsecurity.com/content/view/172182/169/

Kerberos bypass, login theft bug slain by Microsoft, Linux slingers
http://www.linuxsecurity.com/content/view/172181/169/