18日 水曜日、大安

+ Google Chrome 66.0.3359.117 released
https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html

+ UPDATE: Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2

+ UPDATE: Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi

+ UPDATE: Cisco Best Practices to Harden Devices Against Cyber Attacks Targeting Network Infrastructure
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180416-tsa18-106a

+ OpenSSL Security Advisory [16 Apr 2018]
https://www.openssl.org/news/secadv/20180416.txt
CVE-2018-0737

+ Samba 4.7.7 Available for Download
https://www.samba.org/samba/history/samba-4.7.7.html

+ Java SE 10.0.1, 8u171/ 8u172 released
http://www.oracle.com/technetwork/java/javase/documentation/10u-relnotes-4108739.html
http://www.oracle.com/technetwork/java/javase/documentation/8u-relnotes-2225394.html

Amazon EC2 C5 および P3 インスタンスで、最適化された TensorFlow 1.6 により、高速なトレーニングを実行する
https://aws.amazon.com/jp/blogs/news/faster-training-with-optimized-tensorflow-1-6-on-amazon-ec2-c5-and-p3-instances/

Amazon SageMaker を使用して Word-Pronunciation シーケンスツーシーケンスモデルを作成する
https://aws.amazon.com/jp/blogs/news/create-a-word-pronunciation-sequence-to-sequence-model-using-amazon-sagemaker/

Initiafy と Amazon Polly でアクセス可能なトレーニングを作成する
https://aws.amazon.com/jp/blogs/news/create-accessible-training-with-initiafy-and-amazon-polly/

AWS AppSync ? 6 つの新機能を加え本番提供開始
https://aws.amazon.com/jp/blogs/news/aws-appsync-production-ready-with-six-new-features/

Pgpool-II 3.7.3, 3.6.10, 3.5.14, 3.4.17 and 3.3.21 are now officially released.
https://www.postgresql.org/about/news/1847/

NECがIoTの「エッジ」を監視、不正アクセスを遮断
http://tech.nikkeibp.co.jp/atcl/nxt/news/18/00907/?ST=nxt_thmit_security

MSがIoT端末向けセキュリティ「Azure Sphere」発表、Linuxベースの組み込みOSも
http://tech.nikkeibp.co.jp/atcl/nxt/news/18/00896/?ST=nxt_thmit_security

JVN#52695336 EC-CUBE におけるセッション固定の脆弱性
https://jvn.jp/jp/JVN52695336/

UPDATE: JVN#15643848 Spring Security と Spring Framework に認証回避の脆弱性
http://jvn.jp/jp/JVN15643848/index.html