30日 木曜日、友引

+ CESA-2018:2557 Important CentOS 7 postgresql Security Update
https://lwn.net/Articles/763693/

+ CESA-2018:2570 Important CentOS 7 bind Security Update
https://lwn.net/Articles/763691/

+ CESA-2018:2571 Important CentOS 6 bind Security Update
https://lwn.net/Articles/763692/

+ Wireshark 2.6.3, 2.4.9, 2.2.17 released
https://www.wireshark.org/docs/relnotes/wireshark-2.6.3.html
https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
https://www.wireshark.org/docs/relnotes/wireshark-2.2.17.html

+ Linux kernel 4.4.153, 3.18.120 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.153
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.120

+ UPDATE: JVNVU#96222149 Microsoft Windows タスクスケジューラの ALPC インターフェースにおけるローカル権限昇格の脆弱性
http://jvn.jp/vu/JVNVU96222149/index.html

+ phpMyAdmin 4.7.x Cross-Site Request Forgery
https://cxsecurity.com/issue/WLB-2018080218
CVE-2017-1000499

+ Apache Struts CVE-2018-11776 Exploit (python)
https://cxsecurity.com/issue/WLB-2018080207
CVE-2018-11776

AWS IoT Core がお客様に提供する Symantec の認証局無効化の対応方法
https://aws.amazon.com/jp/blogs/news/aws-iot-core-ats-endpoints/

Amazon Lightsail の更新 ? インスタンスサイズが増えて料金は値引きに
https://aws.amazon.com/jp/blogs/news/amazon-lightsail-update-more-instance-sizes-and-price-reductions/

JVN#69967692 ヤマハ製の複数のネットワーク機器における複数のスクリプトインジェクションの脆弱性
http://jvn.jp/jp/JVN69967692/index.html