20日 金曜日、先負

+ gawk 4.2.0 released
http://ftp.gnu.org/gnu/gawk/?C=M;O=D

+ RHSA-2017:2972 Moderate: httpd security update
https://access.redhat.com/errata/RHSA-2017:2972
CVE-2017-12171
CVE-2017-9798

+ RHSA-2017:2966 Moderate: ansible security, bug fix, and enhancement update
https://access.redhat.com/errata/RHSA-2017:2966
CVE-2017-7550

+ RHSA-2017:2930 Important: kernel security and bug fix update
https://access.redhat.com/errata/RHSA-2017:2930
CVE-2016-8399
CVE-2017-1000111
CVE-2017-1000112
CVE-2017-11176
CVE-2017-14106
CVE-2017-7184
CVE-2017-7541
CVE-2017-7542
CVE-2017-7558

+ CESA-2017:2911 Important CentOS 6 wpa_supplicant Security Update
https://lwn.net/Alerts/736856/

+ Ubuntu 17.10, 16.04.3 released
https://wiki.ubuntu.com/ArtfulAardvark/ReleaseNotes?_ga=2.239840512.228917382.1508457611-1754260706.1408405881
https://wiki.ubuntu.com/XenialXerus/ReleaseNotes?_ga=2.109678214.228917382.1508457611-1754260706.1408405881

+ UPDATE: Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

+ UPDATE: Cisco Nexus Series Switches CLI Command Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-nss

+ UPDATE: Oracle Critical Patch Update Advisory - October 2017
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

+ Apple iOS 10.2 (14C92) Remote Code Execution
https://cxsecurity.com/issue/WLB-2017100140

+ Tomcat Remote Code Execution via JSP Upload Bypass
https://cxsecurity.com/issue/WLB-2017100138
CVE-2017-12617

PostgresDAC 3.3.0 meets PostgreSQL 10
https://www.postgresql.org/about/news/1794/

UPDATE: JVNVU#90609033 Wi-Fi Protected Access II (WPA2) ハンドシェイクにおいて Nonce およびセッション鍵が再利用される問題
http://jvn.jp/vu/JVNVU90609033/index.html

やばいパスワード
役立たずの烙印、パスワードにまつわる「秘密の質問」
http://itpro.nikkeibp.co.jp/atcl/column/17/092800400/101700005/?ST=security&itp_list_theme

ニュース解説
データ保護で出遅れた日本企業、GDPR対応済みは2％
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/101801168/?ST=security&itp_list_theme

日立、プライバシー保護の取り組みをまとめたホワイトペーパーを改訂
http://itpro.nikkeibp.co.jp/atcl/news/17/101902477/?ST=security&itp_list_theme

ウイルスバスター クラウドに不具合、Windows 10の大型更新でブルースクリーン
http://itpro.nikkeibp.co.jp/atcl/news/17/101902472/?ST=security&itp_list_theme