13日 月曜日、先負

+ BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2018-5740）
https://jprs.jp/tech/security/2018-08-09-bind9-vuln-deny-answer-aliases.html
CVE-2018-5740

+ CESA-2018:2283 Moderate CentOS 6 java-1.7.0-openjdk Security Update
https://lwn.net/Articles/762359/

+ CESA-2018:2308 Important CentOS 6 openslp Security Update
https://lwn.net/Articles/762361/

+ CESA-2018:2285 Important CentOS 7 yum-utils Security Update
https://lwn.net/Articles/762363/

+ CESA-2018:2286 Moderate CentOS 7 java-1.7.0-openjdk Security Update
https://lwn.net/Articles/762360/

+ CESA-2018:2284 Important CentOS 6 yum-utils Security Update
https://lwn.net/Articles/762362/

+ CVE-2018-5740: A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named
https://kb.isc.org/article/AA-01639
CVE-2018-5740

+ Linux kernel 4.17.14, 4.14.62, 4.9.119, 4.4.147, 3.18.118 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.14
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.62
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.119
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.147
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.118

+ PostgreSQL 10.5, 9.6.10, 9.5.14, 9.4.19, 9.3.24 released
https://www.postgresql.org/docs/10/static/release-10-5.html
https://www.postgresql.org/docs/9.6/static/release-9-6-10.html
https://www.postgresql.org/docs/9.5/static/release-9-5-14.html
https://www.postgresql.org/docs/9.4/static/release-9-4-19.html
https://www.postgresql.org/docs/9.3/static/release-9-3-24.html

+ UPDATE: JVNVU#91510483 複数の TCP 実装にサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU91510483/index.html

+ JVNVU#91290141 ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU91290141/index.html
CVE-2018-5740

+ Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) (KASLR & SMEP Bypass) Arbitrary File Read
https://cxsecurity.com/issue/WLB-2018080074
CVE-2017-18344

Amazon Rekognition を利用して人身売買と戦う Marinus Analytics 社
https://aws.amazon.com/jp/blogs/news/marinus-analytics-fights-human-trafficking-using-amazon-rekognition/

AWS アカウント 無料利用枠の確認方法について
https://aws.amazon.com/jp/blogs/news/aws-free-tier/

AWS Service Update 動画 (2018/08/09) が公開されました
https://aws.amazon.com/jp/blogs/news/aws-service-update-jp-20180809/

[AWS Black Belt Online Seminar] クラウド設計・運用のベストプラクティス集 “AWS Well-Architected Framework” 資料及び QA 公開
https://aws.amazon.com/jp/blogs/news/webinar-bb-aws-wellarchitected-framework-2018/

[AWS Black Belt Online Seminar] S3ユースケース紹介及びサービスアップデート解説 資料及び QA 公開
https://aws.amazon.com/jp/blogs/news/webinar-bb-s3-usecase-2018/

[AWS Black Belt Online Seminar] AWS Service Catalog 資料及び QA 公開
https://aws.amazon.com/jp/blogs/news/webinar-bb-service-catalog-2018/

[AWS Black Belt Online Seminar] 大阪ローカルリージョンの活用とAWSで実現するDisaster Recovery 資料及び QA 公開
https://aws.amazon.com/jp/blogs/news/webinar-bb-osaka-region-2018/

Twilio が、Amazon Polly との統合で、幅広い音声選択を顧客に提供
https://aws.amazon.com/jp/blogs/news/twilio-offers-greater-voice-selection-to-customers-with-amazon-polly-integration/

Amazon SageMaker MXNet 1.2 コンテナの発表
https://aws.amazon.com/jp/blogs/news/announcing-the-amazon-sagemaker-mxnet-1-2-container/

JVN#06372244 EC-CUBEペイメント決済モジュールおよび EC-CUBE用 GMO-PG決済モジュール (PGマルチペイメントサービス) における複数の脆弱性
http://jvn.jp/jp/JVN06372244/index.html