27日 月曜日、先負

+ nginx-1.13.7 released
http://nginx.org/en/CHANGES

+ Mozilla Foundation Security Advisory 2017-26 Security vulnerabilities fixed in Thunderbird 52.5
https://www.mozilla.org/en-US/security/advisories/mfsa2017-26/
CVE-2017-7828
CVE-2017-7830
CVE-2017-7826

+ Linux kernel 4.14.2, 4.13.16, 4.9.65, 4.4.102, 3.18.84, 3.16.51, 3.2.96 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.16
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.65
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.102
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.84
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.51
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.96

+ PHP 7.1.12 Released
http://php.net/ChangeLog-7.php#7.1.12

+ UPDATE: JVNVU#90609033 Wi-Fi Protected Access II (WPA2) ハンドシェイクにおいて Nonce およびセッション鍵が再利用される問題
http://jvn.jp/vu/JVNVU90609033/

+ Microsoft Windows 10 nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry) Pool Memory Disclosure
https://cxsecurity.com/issue/WLB-2017110143

+ Linux mincore() Uninitialized Kernel Heap Page Disclosure
https://cxsecurity.com/issue/WLB-2017110142

+ Linux Kernel CVE-2017-16939 Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/101954
CVE-2017-16939

ニュース解説
セキュリティ強化が進むWindows 10、それでも企業が移行を躊躇する理由
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/111701211/?ST=security&itp_list_theme

インターネット再生計画
「出会いを完全に防ぐのは無理」、LINEが考える未成年犯罪対策
http://itpro.nikkeibp.co.jp/atcl/column/17/111000513/112200007/?ST=security&itp_list_theme