7日 金曜日、赤口

+ CESA-2017:1680 Important CentOS 7 bind Security Update
https://lwn.net/Alerts/727286/

+ CESA-2017:1679 Important CentOS 6 bind Security Update
https://lwn.net/Alerts/727287/

+ CESA-2017:1681 Important CentOS 7 qemu-kvm Security Update
https://lwn.net/Alerts/727288/

+ UPDATE: SNMP Remote Code Execution Vulnerabilities in Cisco IOS and IOS XE Software
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp

+ UPDATE: Cisco Prime Network Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-cpn

+ SA77772 Google Nexus Multiple Vulnerabilities
https://secuniaresearch.flexerasoftware.com/advisories/77772/
CVE-2016-2109
CVE-2017-0540
CVE-2017-0671
CVE-2017-0672
CVE-2017-0673
CVE-2017-0674
CVE-2017-0675
CVE-2017-0676
CVE-2017-0677
CVE-2017-0678
CVE-2017-0679
CVE-2017-0680
CVE-2017-0681
CVE-2017-0682
CVE-2017-0683
CVE-2017-0685
CVE-2017-0686
CVE-2017-0688
CVE-2017-0689
CVE-2017-0690
CVE-2017-0691
CVE-2017-0692
CVE-2017-0693
CVE-2017-0694
CVE-2017-0695
CVE-2017-0696
CVE-2017-0697
CVE-2017-0698
CVE-2017-0699
CVE-2017-0700
CVE-2017-0701
CVE-2017-0702
CVE-2017-3544
CVE-2017-9417

+ PHP 7.1.7, 5.6.31 Released
http://www.php.net/ChangeLog-7.php#7.1.7
http://www.php.net/ChangeLog-5.php#5.6.31

+ PHP < 5.6.28 parse_url() bypass HOST to return fake host
https://cxsecurity.com/issue/WLB-2017070054

Ldap2pg v1.0
https://www.postgresql.org/about/news/1762/

JVNDB-2017-000164 WordPress 用プラグイン Shortcodes Ultimate におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000164.html

青木恵美の信州ITラプソディ
Facebookアカウントが乗っ取られた！ 「コンビニでカード買ってきて」からの顛末
http://itpro.nikkeibp.co.jp/atcl/column/16/042700098/070600033/?ST=security&itp_list_theme

会員CSIRTは230超、多過ぎて「顔が見えない」弊害も――日本シーサート協議会の10年
http://itpro.nikkeibp.co.jp/atcl/news/17/070601859/?ST=security&itp_list_theme

Cloud computing security: This is where you'll be spending the money
http://www.linuxsecurity.com/content/view/172057/169/

How to Achieve an Optimal Security Posture
http://www.linuxsecurity.com/content/view/172056/169/