16日 木曜日、赤口

+ RHSA-2018:2435 Important: flash-plugin security update
https://access.redhat.com/errata/RHSA-2018:2435
CVE-2018-12824
CVE-2018-12825
CVE-2018-12826
CVE-2018-12827
CVE-2018-12828

+ CESA-2018:2384 Important CentOS 7 kernel Security Update
https://lwn.net/Articles/762652/

+ CESA-2018:2390 Important CentOS 6 kernel Security Update
https://lwn.net/Articles/762653/

+ VU#982149 Intel processors are vulnerable to a speculative execution side-channel attack called L1 Terminal Fault (L1TF)
https://www.kb.cert.org/vuls/id/982149
CVE-2018-3615
CVE-2018-3620
CVE-2018-3646

+ FreeBSD-SA-18:11.hostapd Unauthenticated EAPOL-Key Decryption Vulnerability
https://www.freebsd.org/security/advisories/FreeBSD-SA-18:11.hostapd.asc
CVE-2018-14526

+ FreeBSD-SA-18:10.ip Resource exhaustion in IP fragment reassembly
https://www.freebsd.org/security/advisories/FreeBSD-SA-18:10.ip.asc
CVE-2018-6923

+ FreeBSD-SA-18:09.l1tf L1 Terminal Fault (L1TF) Kernel Information Disclosure
https://www.freebsd.org/security/advisories/FreeBSD-SA-18:09.l1tf.asc
CVE-2018-3620
CVE-2018-3646

+ Linux kernel 4.18.1, 4.17.15, 4.14.63, 4.9.120, 4.4.148 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.15
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.63
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.120
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.148

+ JVNVU#93630542 Linux の IP 実装におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU93630542/index.html
CVE-2018-5391

Aurora Serverless MySQL の一般利用が開始
https://aws.amazon.com/jp/blogs/news/aurora-serverless-ga/

Curalate は、AWS で Apache MXNet を使用して AI によるソーシャルセールを行う
https://aws.amazon.com/jp/blogs/news/curalate-makes-social-sell-with-ai-using-apache-mxnet-on-aws/

Amazon Translate が Memsource 翻訳管理システムで利用可能に
https://aws.amazon.com/jp/blogs/news/amazon-translate-now-available-in-the-memsource-translation-management-system/

[AWS Black Belt Online Seminar] Amazon QuickSight アップデート：一般公開後に追加された特徴的な新機能 資料及び QA 公開
https://aws.amazon.com/jp/blogs/news/webinar-bb-quicksight-2018/

JVNVU#93409761 IKEv1 のメインモードに総当たり攻撃に対する脆弱性
http://jvn.jp/vu/JVNVU93409761/index.html