15日 水曜日、大安

+ Mozilla Firefox 57.0 released
https://www.mozilla.org/en-US/firefox/57.0/releasenotes/

+ Mozilla Foundation Security Advisory 2017-24 Security vulnerabilities fixed in Firefox 57
https://www.mozilla.org/en-US/security/advisories/mfsa2017-24/
CVE-2017-7828
CVE-2017-7830
CVE-2017-7831
CVE-2017-7832
CVE-2017-7833
CVE-2017-7834
CVE-2017-7835
CVE-2017-7836
CVE-2017-7837
CVE-2017-7838
CVE-2017-7839
CVE-2017-7840
CVE-2017-7842
CVE-2017-7827
CVE-2017-7826

+ APSB17-41 Security updates available for Adobe Experience Manager
https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html
CVE-2017-3109
CVE-2017-3111
CVE-2017-11296

+ APSB17-40 Security update available for Adobe Shockwave Player
https://helpx.adobe.com/security/products/shockwave/apsb17-40.html
CVE-2017-11294

+ APSB17-39 Security update available for Adobe Digital Editions
https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html
CVE-2017-11273
CVE-2017-11297
CVE-2017-11298
CVE-2017-11299
CVE-2017-11300
CVE-2017-11301

+ APSB17-38 Security update available for Adobe InDesign
https://helpx.adobe.com/security/products/indesign/apsb17-38.html
CVE-2017-11302

+ APSB17-37 Security update available for the Adobe DNG Converter
https://helpx.adobe.com/security/products/dng-converter/apsb17-37.html
CVE-2017-11295

+ APSB17-36 Security updates available for Adobe Acrobat and Reader
https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE-2017-16377
CVE-2017-16378
CVE-2017-16360
CVE-2017-16388
CVE-2017-16389
CVE-2017-16390
CVE-2017-16393
CVE-2017-16398
CVE-2017-16381
CVE-2017-16385
CVE-2017-16392
CVE-2017-16395
CVE-2017-16396
CVE-2017-16363
CVE-2017-16365
CVE-2017-16374
CVE-2017-16384
CVE-2017-16386
CVE-2017-16387
CVE-2017-16368
CVE-2017-16383
CVE-2017-16391
CVE-2017-16410
CVE-2017-16362
CVE-2017-16370
CVE-2017-16376
CVE-2017-16382
CVE-2017-16394
CVE-2017-16397
CVE-2017-16399
CVE-2017-16400
CVE-2017-16401
CVE-2017-16402
CVE-2017-16403
CVE-2017-16404
CVE-2017-16405
CVE-2017-16408
CVE-2017-16409
CVE-2017-16412
CVE-2017-16414
CVE-2017-16417
CVE-2017-16418
CVE-2017-16420
CVE-2017-11293
CVE-2017-16407
CVE-2017-16413
CVE-2017-16415
CVE-2017-16416
CVE-2017-16361
CVE-2017-16366
CVE-2017-16369
CVE-2017-16380
CVE-2017-16419
CVE-2017-16367
CVE-2017-16379
CVE-2017-16406
CVE-2017-16364
CVE-2017-16371
CVE-2017-16372
CVE-2017-16373
CVE-2017-16375
CVE-2017-16411

+ APSB17-35 Security update available for Adobe Connect
https://helpx.adobe.com/security/products/connect/apsb17-35.html
CVE-2017-11291
CVE-2017-11287
CVE-2017-11288
CVE-2017-11289
CVE-2017-11290

+ APSB17-34 Security updates available for Adobe Photoshop CC
https://helpx.adobe.com/security/products/photoshop/apsb17-34.html
CVE-2017-11303
CVE-2017-11304

+ APSB17-33 Security updates available for Adobe Flash Player
https://helpx.adobe.com/security/products/flash-player/apsb17-33.html
CVE-2017-3112
CVE-2017-3114
CVE-2017-11213
CVE-2017-11215
CVE-2017-11225

+ 2017 年 11 月のセキュリティ更新プログラム
https://portal.msrc.microsoft.com/ja-jp/security-guidance/releasenotedetail/bae9d0d8-e497-e711-80e5-000d3a32fc99

+ UPDATE: Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

+ Linux kernel 4.14, 3.16.50, 3.2.95 released
https://www.kernel.org/
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.50
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.95

シリコンバレーNextレポート
ディープラーニングにもセキュリティ問題、AIをだます手口に注意
http://itpro.nikkeibp.co.jp/atcl/column/15/061500148/111400137/?ST=security&itp_list_theme

有識者座談会 セキュリティの非常識
サイバー攻撃の犯人は誰？知る必要はあるのか
http://itpro.nikkeibp.co.jp/atcl/column/17/110900508/111300003/?ST=security&itp_list_theme

JVNVU#94371484 Packetbeat におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU94371484/index.html

JVN#05398317 WordPress 用プラグイン TablePress における XML 外部実体参照 (XXE) 処理の脆弱性
http://jvn.jp/jp/JVN05398317/index.html

JVN#18420340 BOOK☆WALKER for Windows/Mac における複数の脆弱性
http://jvn.jp/jp/JVN18420340/index.html