18日 金曜日、友引

+ CESA-2017:2485 Important CentOS 6 git Security Update
https://lwn.net/Alerts/731282/

+ Mozilla Thunderbird 52.3.0 released
https://www.mozilla.org/en-US/thunderbird/52.3.0/releasenotes/

+ Apache Tomcat 7.0.81 Released
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html#Tomcat_7.0.81_(violetagg)

+ UPDATE: JVNVU#91991349 Apache Tomcat の複数の脆弱性に対するアップデート
http://jvn.jp/vu/JVNVU91991349/

+ Drupal Access Control Flaws Let Remote Authenticated Users Bypass Security Restrictions on the Target System
http://www.securitytracker.com/id/1039200
CVE-2017-6923
CVE-2017-6924
CVE-2017-6925

+ RHSA-2017:2489 Important: mercurial security update
https://access.redhat.com/errata/RHSA-2017:2489
CVE-2017-1000115
CVE-2017-1000116

+ RHSA-2017:2486 Important: groovy security update
https://access.redhat.com/errata/RHSA-2017:2486
CVE-2016-6814

+ RHSA-2017:2485 Important: git security update
https://access.redhat.com/errata/RHSA-2017:2485
CVE-2017-1000117

+ RHSA-2017:2484 Important: git security update
https://access.redhat.com/errata/RHSA-2017:2484
CVE-2017-1000117

+ RHSA-2017:2481 Critical: java-1.7.1-ibm security update
https://access.redhat.com/errata/RHSA-2017:2481
CVE-2017-10053
CVE-2017-10067
CVE-2017-10087
CVE-2017-10089
CVE-2017-10090
CVE-2017-10096
CVE-2017-10101
CVE-2017-10102
CVE-2017-10105
CVE-2017-10107
CVE-2017-10108
CVE-2017-10109
CVE-2017-10110
CVE-2017-10115
CVE-2017-10116
CVE-2017-10243

+ RHSA-2017:2480 Important: subversion security update
https://access.redhat.com/errata/RHSA-2017:2480
CVE-2017-9800

+ RHSA-2017:2479 Important: httpd security update
https://access.redhat.com/errata/RHSA-2017:2479
CVE-2017-3167
CVE-2017-3169
CVE-2017-7668
CVE-2017-7679
CVE-2017-9788

+ RHSA-2017:2478 Important: httpd security update
https://access.redhat.com/errata/RHSA-2017:2478
CVE-2017-3167
CVE-2017-3169
CVE-2017-7679
CVE-2017-9788

+ RHSA-2017:2473 Important: kernel security and bug fix update
https://access.redhat.com/errata/RHSA-2017:2473
CVE-2017-7533

+ RHSA-2017:2471 Important: spice security update
https://access.redhat.com/errata/RHSA-2017:2471
CVE-2017-7506

+ RHSA-2017:2469 Critical: java-1.8.0-ibm security update
https://access.redhat.com/errata/RHSA-2017:2469
CVE-2017-10053
CVE-2017-10067
CVE-2017-10078
CVE-2017-10087
CVE-2017-10089
CVE-2017-10090
CVE-2017-10096
CVE-2017-10101
CVE-2017-10102
CVE-2017-10105
CVE-2017-10107
CVE-2017-10108
CVE-2017-10109
CVE-2017-10110
CVE-2017-10115
CVE-2017-10116
CVE-2017-10243

+ RHSA-2017:2456 Critical: firefox security update
https://access.redhat.com/errata/RHSA-2017:2456
CVE-2017-7753
CVE-2017-7779
CVE-2017-7784
CVE-2017-7785
CVE-2017-7786
CVE-2017-7787
CVE-2017-7791
CVE-2017-7792
CVE-2017-7798
CVE-2017-7800
CVE-2017-7801
CVE-2017-7802
CVE-2017-7803
CVE-2017-7807
CVE-2017-7809

+ RHSA-2017:2459 Important: libsoup security update
https://access.redhat.com/errata/RHSA-2017:2459
CVE-2017-2885

+ RHSA-2017:2457 Critical: flash-plugin security update
https://access.redhat.com/errata/RHSA-2017:2457
CVE-2017-3085
CVE-2017-3106

+ RHSA-2017:2445 Moderate: qemu-kvm security update
https://access.redhat.com/errata/RHSA-2017:2445
CVE-2017-10664

JVNDB-2017-000201 新・緊急時報告データ入力プログラムのインストーラにおける DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000201.html

JVNDB-2017-000200 新・石油輸入調査報告データ入力プログラムのインストーラにおける DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000200.html

JVNDB-2017-000199 新・基幹統計報告データ入力用プログラムのインストーラにおける DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000199.html

JVNDB-2017-000154 定期報告書作成支援ツールにおける DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000154.html

Skilled bad actors use new pulse wave DDoS attacks to hit multiple targets
http://www.linuxsecurity.com/content/view/175489/169/

A Deep Flaw in Your Car Lets Hackers Shut Down Safety Features
http://www.linuxsecurity.com/content/view/175488/169/