2日 金曜日、先負

+ UPDATE: CPU Side-Channel Information Disclosure Vulnerabilities
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel

+ PostgreSQL 10.3, 9.6.8, 9.5.12, 9.4.17, and 9.3.22 released!
https://www.postgresql.org/about/news/1834/
https://www.postgresql.org/docs/10/static/release-10-3.html
https://www.postgresql.org/docs/9.6/static/release-9-6-8.html
https://www.postgresql.org/docs/9.5/static/release-9-5-12.html
https://www.postgresql.org/docs/9.4/static/release-9-4-17.html
https://www.postgresql.org/docs/9.3/static/release-9-3-22.html

+ PHP 7.2.3, 7.2.2, 7.1.14, 7,0,28 Released
http://www.php.net/ChangeLog-7.php#7.2.3
http://www.php.net/ChangeLog-7.php#7.2.2
http://www.php.net/ChangeLog-7.php#7.1.14
http://www.php.net/ChangeLog-7.php#7.0.28

+ FreeBSD 10.2 x64 sendmsg Kernel Heap Overflow (PoC)
https://cxsecurity.com/issue/WLB-2018030009

+ FreeBSD 10.2 < 10.3 x64 SETFKEY (PoC)
https://cxsecurity.com/issue/WLB-2018030008

いよいよモバイルワールドコングレスの開催です。コネクテッドカーのデモをご覧ください!
https://aws.amazon.com/jp/blogs/news/attending-mobile-world-congress-check-out-our-connected-car-demo/

AWS Certificate Manager (ACM) が Certificate Transparency (CT) をサポートするための準備
https://aws.amazon.com/jp/blogs/news/securityhow-to-get-ready-for-certificate-transparency/

JVNVU#98536678 複数の SAML ライブラリに認証回避の脆弱性
http://jvn.jp/vu/JVNVU98536678/index.html

JALがチェックインや搭乗口に顔認証導入へ、待ち時間短縮図る
http://tech.nikkeibp.co.jp/atcl/nxt/news/18/00304/?ST=nxt_thmit_security