1日 木曜日、友引

+ warning message out-of-buffer read
https://curl.haxx.se/docs/CVE-2018-16842.html
CVE-2018-16842

+ use-after-free in handle close
https://curl.haxx.se/docs/CVE-2018-16840.html
CVE-2018-16840

+ SASL password overflow via integer overflow
https://curl.haxx.se/docs/CVE-2018-16839.html
CVE-2018-16839

+ Mozilla Firefox 63.0.1 released
https://www.mozilla.org/en-US/firefox/63.0.1/releasenotes/

+ Mozilla Thunderbird 60.3.0 released
https://www.thunderbird.net/en-US/thunderbird/60.3.0/releasenotes/

+ Mozilla Foundation Security Advisory 2018-28 Security vulnerabilities fixed in Thunderbird ESR 60.3
https://www.mozilla.org/en-US/security/advisories/mfsa2018-28/
CVE-2018-12391
CVE-2018-12392
CVE-2018-12393
CVE-2018-12389
CVE-2018-12390

+ curl 7.62.0 released
https://curl.haxx.se/changes.html#7_62_0

+ JVNVU#96365720 複数の Apple 製品における脆弱性に対するアップデート
https://jvn.jp/vu/JVNVU96365720/

Amazon Translate が 113 の新言語ペアを提供できるようになりました
https://aws.amazon.com/jp/blogs/news/amazon-translate-now-offers-113-new-language-pairs/