30日 月曜日、先勝

+ MantisBT 2.8.0 and 2.7.1 released
http://www.mantisbt.org/blog/?p=540

+ RHSA-2017:3080 Important: tomcat6 security update
https://access.redhat.com/errata/RHSA-2017:3080
CVE-2017-12615
CVE-2017-12617
CVE-2017-5647
CVE-2017-5664

+ RHSA-2017:3081 Important: tomcat security update
https://access.redhat.com/errata/RHSA-2017:3081
CVE-2017-12615
CVE-2017-12617
CVE-2017-5647
CVE-2017-7674

+ CESA-2017:3075 Important CentOS 7 wget Security Update
https://lwn.net/Alerts/737593/

+ CESA-2017:3071 Moderate CentOS 6 ntp Security Update
https://lwn.net/Alerts/737592/

+ UPDATE: Cisco FXOS and NX-OS System Software Authentication, Authorization, and Accounting Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-aaavty

+ Linux kernel 4.13.10, 4.9.59, 4.4.95, 3.18.78 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.59
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.95
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.78

+ Hitachi Multiple Products Multiple Vulnerabilities
https://secuniaresearch.flexerasoftware.com/advisories/79763/
CVE-2016-10165
CVE-2016-9841
CVE-2017-10274
CVE-2017-10281
CVE-2017-10285
CVE-2017-10293
CVE-2017-10295
CVE-2017-10345
CVE-2017-10346
CVE-2017-10347
CVE-2017-10348
CVE-2017-10349
CVE-2017-10350
CVE-2017-10355
CVE-2017-10356
CVE-2017-10357
CVE-2017-10388

+ hitachi-sec-2017-131 Multiple Vulnerabilities in Cosminexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-131/index.html
CVE-2016-9841
CVE-2016-10165
CVE-2017-10274
CVE-2017-10281
CVE-2017-10285
CVE-2017-10293
CVE-2017-10295
CVE-2017-10345
CVE-2017-10346
CVE-2017-10347
CVE-2017-10348
CVE-2017-10349
CVE-2017-10350
CVE-2017-10355
CVE-2017-10356
CVE-2017-10357
CVE-2017-10388

+ hitachi-sec-2017-131 Cosminexusにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-131/index.html
CVE-2016-9841
CVE-2016-10165
CVE-2017-10274
CVE-2017-10281
CVE-2017-10285
CVE-2017-10293
CVE-2017-10295
CVE-2017-10345
CVE-2017-10346
CVE-2017-10347
CVE-2017-10348
CVE-2017-10349
CVE-2017-10350
CVE-2017-10355
CVE-2017-10356
CVE-2017-10357
CVE-2017-10388

+ Postfix 3.2.4, 3.1.7, 3.0.11 released
http://mirror.postfix.jp/postfix-release/official/postfix-3.2.4.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-3.1.7.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-3.0.11.HISTORY

+ PHP 7.1.11 Released
http://www.php.net/ChangeLog-7.php#7.1.11

+ UPDATE: JVNVU#90609033 Wi-Fi Protected Access II (WPA2) ハンドシェイクにおいて Nonce およびセッション鍵が再利用される問題
http://jvn.jp/vu/JVNVU90609033/index.html

+ JVNVU#99266133 GNU Wget における複数のバッファオーバーフローの脆弱性
http://jvn.jp/vu/JVNVU99266133/index.html

Announcing General Availability of Amazon Aurora with PostgreSQL Compatibility
https://www.postgresql.org/about/news/1795/

ランサムウエア対処の鉄則
被害止まらぬランサムウエア、二つの攻撃手法を知り対処すべし
http://itpro.nikkeibp.co.jp/atcl/column/17/102600453/102700002/?ST=security&itp_list_theme

「ランサムウエアBad Rabbitは脆弱性を利用」、トレンドマイクロの追加調査で明らかに
http://itpro.nikkeibp.co.jp/atcl/news/17/102702543/?ST=security&itp_list_theme

アイカ工業がファイル改ざんの痕跡を確認、Bad Rabbit拡散の可能性強まる
http://itpro.nikkeibp.co.jp/atcl/news/17/102702539/?ST=security&itp_list_theme