5日 火曜日、先負

+ CESA-2017:2550 Moderate CentOS 6 poppler Security Update
https://lwn.net/Alerts/732627/

+ CESA-2017:2534 Important CentOS 6 thunderbird Security Update
https://lwn.net/Alerts/732628/

+ CESA-2017:2563 Moderate CentOS 6 openssh Security Update
https://lwn.net/Alerts/732626/

+ Linux kernel 4.9.47, 4.4.86, 3.18.69 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.47
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.86
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.69

+ Sudo 1.8.21p1 released
https://www.sudo.ws/stable.html#1.8.21p1

+ hitachi-sec-2017-122 DoS Vulnerability in JP1 and Hitachi IT Operations Director
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-122/index.html

+ hitachi-sec-2017-122 JP1およびHitachi IT Operations Director製品におけるDoS脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-122/index.html

+ PHP 7.1.9, 7.0.23 Released
http://www.php.net/ChangeLog-7.php#7.1.9
http://www.php.net/ChangeLog-7.php#7.0.23

+ Wireshark MSDP/Profinet I/O/Modbus/IrCOMM Dissector Bugs Lets Remote Users Cause Denial of Service Conditions
http://www.securitytracker.com/id/1039254
CVE-2017-13764
CVE-2017-13765
CVE-2017-13766
CVE-2017-13767

ニュース解説
変わる暗号通信TLS、メリットとデメリット
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/090401109/?ST=security&itp_list_theme

ハード不況でもなぜ売れる？
5年で4倍に、静脈認証が好調な理由
http://itpro.nikkeibp.co.jp/atcl/column/17/082800349/090100002/?ST=security&itp_list_theme

半年で1億8000万円被害、ソフトバンクと愛知県警らが架空請求詐欺撲滅へ
http://itpro.nikkeibp.co.jp/atcl/news/17/090402176/?ST=security&itp_list_theme

東京ガスの料金照会サービスに不正アクセス、17件の顧客情報が流出
http://itpro.nikkeibp.co.jp/atcl/news/17/090102175/?ST=security&itp_list_theme

ソネットの通信障害、原因は「中継機器への大量アクセス
http://itpro.nikkeibp.co.jp/atcl/news/17/090102172/?ST=security&itp_list_theme

US government: We can jail you indefinitely for not decrypting your data
http://www.linuxsecurity.com/content/view/175531/169/

Now you, too, can disable Intel ME 'backdoor' thanks to the NSA
http://www.linuxsecurity.com/content/view/175530/169/