24日 水曜日、先勝

+ マイクロソフト テクニカル セキュリティ通知のご案内
https://technet.microsoft.com/ja-jp/security/dd252948

+ マイクロソフト セキュリティ脆弱性情報（CVE-2018-0746 ほか複数）を更新
https://portal.msrc.microsoft.com/ja-jp/

+ ADV180002 | Guidance to mitigate speculative execution side-channel vulnerabilities
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
CVE-2017-5753
CVE-2017-5715
CVE-2017-5754

+ Mozilla Firefox 58.0 released
https://www.mozilla.org/en-US/firefox/58.0/releasenotes/

+ Mozilla Foundation Security Advisory 2018-02 Security vulnerabilities fixed in Firefox 58
https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/
CVE-2018-5091
CVE-2018-5092
CVE-2018-5093
CVE-2018-5094
CVE-2018-5095
CVE-2018-5097
CVE-2018-5098
CVE-2018-5099
CVE-2018-5100
CVE-2018-5101
CVE-2018-5102
CVE-2018-5103
CVE-2018-5104
CVE-2018-5105
CVE-2018-5106
CVE-2018-5107
CVE-2018-5108
CVE-2018-5109
CVE-2018-5110
CVE-2018-5111
CVE-2018-5112
CVE-2018-5113
CVE-2018-5114
CVE-2018-5115
CVE-2018-5116
CVE-2018-5117
CVE-2018-5118
CVE-2018-5119
CVE-2018-5121
CVE-2018-5122
CVE-2018-5090
CVE-2018-5089

+ Mozilla Foundation Security Advisory 2018-03 Security vulnerabilities fixed in Firefox ESR 52.6
https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/

+ Windows システム上の Spectre および Meltdown に対する緩和策のパフォーマンスへの影響について
https://blogs.technet.microsoft.com/jpsecurity/2018/01/23/understanding-the-performance-impact-of-spectre-and-meltdown-mitigations-on-windows-systems/

+ UPDATE: Cisco Integrated Management Controller Remote Code Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3

+ UPDATE: Cisco Email Security and Content Security Management Appliance Privilege Escalation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esasma

+ UPDATE: Cisco Integrated Management Controller Privilege Escalation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc

+ Linux kernel 4.14.15, 4.9.78, 4.4.113, 4.1.49 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.78
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.113
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.49

+ ISC BIND 9.12.0 released
http://ftp.isc.org/isc/bind9/9.12.0/RELEASE-NOTES-bind-9.12.0.html

+ Apache Tomcat 9.0.4, 8.5.27 Released
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.4_(markt)
http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.27_(markt)

プロセッサの投機的実行 ? オペレーティングシステムの更新
https://aws.amazon.com/jp/blogs/news/speculative-execution-os-updates/

2018年2月のAWS Black Belt オンラインセミナーのご案内
https://aws.amazon.com/jp/blogs/news/201802-aws-black-belt/

Amazon Aurora under the hood: Z-order curvesを用いたgeospatial indexの作成
https://aws.amazon.com/jp/blogs/news/amazon-aurora-under-the-hood-indexing-geospatial-data-using-z-order-curves/

Amazon RDS for PostgreSQL から Amazon Aurora PostgreSQL リードレプリカを作成可能になりました
https://aws.amazon.com/jp/blogs/news/announcing-amazon-aurora-postgresql-read-replica-for-amazon-rds-for-postgresql/

暗号化されたスナップショットを Amazon Aurora PostgreSQL へ移行可能になりました
https://aws.amazon.com/jp/blogs/news/announcing-encrypted-snapshot-import-for-amazon-aurora-postgresql/

AWS データセンターのセキュアな設計について
https://aws.amazon.com/jp/blogs/news/take-a-digital-tour-of-an-aws-data-center-to-see-how-aws-secures-aws-data-centers-around-the-world/

Microsoft Azure SQL Database から Amazon Aurora への移行
https://aws.amazon.com/jp/blogs/news/migrate-microsoft-azure-sql-database-to-amazon-aurora/

最新 EC2 Goodies ? 起動テンプレートとスプレッドプレイスメント
https://aws.amazon.com/jp/blogs/news/recent-ec2-goodies-launch-templates-and-spread-placement/

Amazon SageMaker BlazingText: 複数の CPU または GPU での Word2Vec の並列化
https://aws.amazon.com/jp/blogs/news/amazon-sagemaker-blazingtext-parallelizing-word2vec-on-multiple-cpus-or-gpus/

Call for Papers and Call for Workshops - PGDay.IT 2018 - June 29h, Garda Lake, Italy
https://www.postgresql.org/about/news/1826/

カード決済はこう変わる
間違い多発？落とし穴の多い改正割販法対応
http://itpro.nikkeibp.co.jp/atcl/column/17/010400600/010400001/?ST=security&itp_list_theme

記者の眼
CPU脆弱性で性能低下、ラズパイ／LattePandaはどうなる？
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/011900996/?ST=security&itp_list_theme

AIで困っている人を見つける、新丸の内ビルで実証実験開始
http://itpro.nikkeibp.co.jp/atcl/news/17/012202995/?ST=security&itp_list_theme