14日 火曜日、仏滅

+ Google Chrome 62.0.3202.94 released
https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop_13.html

+ Linux Kernel CVE-2017-15102 Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/101790
CVE-2017-15102

+ Linux Kernel 'drivers/input/tablet/gtco.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/101769
CVE-2017-16643

+ Linux Kernel 'drivers/input/misc/ims-pcu.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/101768
CVE-2017-16645

+ Linux Kernel 'drivers/net/usb/cdc_ether.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/101761
CVE-2017-16649

Linux Kernel 'drivers/media/dvb-core/dvb_frontend.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/101758
CVE-2017-16648

+ PHP CVE-2017-16642 Heap Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/101745
CVE-2017-16642

+ Google Chrome Prior to 62.0.3202.89 Stack Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/101692
CVE-2017-15398
CVE-2017-15399

+ Linux Kernel 'arch/powerpc/kvm/powerpc.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/101693
CVE-2017-15306

JVN#29602086 CS-Cart日本語版におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN29602086/

編集長の眼
2万円は高いか安いか？セキュリティ国家資格の講習を受けてみた
http://itpro.nikkeibp.co.jp/atcl/watcher/16/110700001/110700052/?ST=security&itp_list_theme

有識者座談会 セキュリティの非常識
セキュリティ攻撃の被害情報、公開するのは悪いこと？
http://itpro.nikkeibp.co.jp/atcl/column/17/110900508/111300002/?ST=security&itp_list_theme