7日 木曜日、大安

+ RHSA-2017:3392 Important: java-1.7.0-openjdk security and bug fix update
https://access.redhat.com/errata/RHSA-2017:3392
CVE-2017-10193
CVE-2017-10198
CVE-2017-10274
CVE-2017-10281
CVE-2017-10285
CVE-2017-10295
CVE-2017-10345
CVE-2017-10346
CVE-2017-10347
CVE-2017-10348
CVE-2017-10349
CVE-2017-10350
CVE-2017-10355
CVE-2017-10356
CVE-2017-10357
CVE-2017-10388

+ About the security content of iOS 11.2
https://support.apple.com/ja-jp/HT208334
CVE-2017-13847
CVE-2017-13879
CVE-2017-13861
CVE-2017-13862
CVE-2017-13876
CVE-2017-13833
CVE-2017-13855
CVE-2017-13867
CVE-2017-13865
CVE-2017-13868
CVE-2017-13869
CVE-2017-13874
CVE-2017-13860
CVE-2017-13080

+ About the security content of tvOS 11.2
https://support.apple.com/ja-jp/HT208327
CVE-2017-13861
CVE-2017-13862
CVE-2017-13876
CVE-2017-13833
CVE-2017-13855
CVE-2017-13867
CVE-2017-13865
CVE-2017-13868
CVE-2017-13869
CVE-2017-13080

+ About the security content of watchOS 4.2
https://support.apple.com/ja-jp/HT208325
CVE-2017-13861
CVE-2017-13862
CVE-2017-13876
CVE-2017-13833
CVE-2017-13855
CVE-2017-13867
CVE-2017-13865
CVE-2017-13868
CVE-2017-13869
CVE-2017-13080

+ Safari 11.0.2 (details available soon)
https://support.apple.com/en-us/HT201222

+ About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan
https://support.apple.com/ja-jp/HT208331
CVE-2017-9798
CVE-2017-1000254
CVE-2017-13872
CVE-2017-13883
CVE-2017-13878
CVE-2017-13875
CVE-2017-13844
CVE-2017-13848: Alex Plaskett of MWR InfoSecurity
CVE-2017-13858
CVE-2017-13847
CVE-2017-13862
CVE-2017-13833
CVE-2017-13876
CVE-2017-13855
CVE-2017-13867
CVE-2017-13865
CVE-2017-13868: Brandon Azad
CVE-2017-13869
CVE-2017-13871
CVE-2017-13860
CVE-2017-3735
CVE-2017-13826

+ iTunes 12.7.2 for Windows (details available soon)
https://support.apple.com/en-us/HT201222

+ Google Chrome 63.0.3239.84 released
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

CVE-2017-15407
CVE-2017-15408
CVE-2017-15409
CVE-2017-15410
CVE-2017-15411
CVE-2017-15412
CVE-2017-15413
CVE-2017-15415
CVE-2017-15416
CVE-2017-15417
CVE-2017-15418
CVE-2017-15419
CVE-2017-15420
CVE-2017-15422
CVE-2017-15423
CVE-2017-15424
CVE-2017-15425
CVE-2017-15426
CVE-2017-15427

+ CESA-2017:3278 Important CentOS 6 samba4 Security Update
https://lwn.net/Alerts/740783/

+ Microsoft Office Equation Editor Code Execution
https://cxsecurity.com/issue/WLB-2017120034
CVE-2017-11882

+ Google Android Multiple Qualcomm Components Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/102073
CVE-2016-3706
CVE-2016-4429
CVE-2017-11043
CVE-2017-11007
CVE-2017-14904
CVE-2017-9716
CVE-2017-14897
CVE-2017-14902
CVE-2017-14895

Whooshkaa と Amazon Polly: 視覚と聴覚を組み合わせてパブリッシングの世界を広げる
https://aws.amazon.com/jp/blogs/news/whooshkaa-and-amazon-polly-combining-eyes-and-ears-to-widen-publishing-horizons/

AWS DeepLens の拡張機能: 独自のプロジェクトの構築
https://aws.amazon.com/jp/blogs/news/aws-deeplens-extensions-build-your-own-project/

AWS と Caltech が新しい研究協力パートナーシップを通じて AI および Machine Learning を促進
https://aws.amazon.com/jp/blogs/news/aws-and-caltech-partner-to-accelerate-ai-and-machine-learning-through-a-new-research-collaboration/

AWS DeepLens を拡張し AWS Lambda で SMS 通知を送信
https://aws.amazon.com/jp/blogs/news/extend-aws-deeplens-to-send-sms-notifications-with-aws-lambda/

AWS サーバーレスアプリケーションのリポジトリの準備を整えてください
https://aws.amazon.com/jp/blogs/news/aws-serverless-app-repo/

PostgreSQL PHP Generator Lite Released
https://www.postgresql.org/about/news/1809/

NISTのフレームワークを使うリスク評価サービス、セキュアワークスが国内で開始
http://itpro.nikkeibp.co.jp/atcl/news/17/120602811/?ST=security&itp_list_theme

「全体像を共有し優先順位付けを」、MUFGが明かすセキュリティ管理の勘所
http://itpro.nikkeibp.co.jp/atcl/news/17/120602805/?ST=security&itp_list_theme

JVN#30352845 Windows 版 公的個人認証サービス　利用者クライアントソフトのインストーラにおける DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN30352845/index.html