Weekly IT Security News Bulletin (27 March– 2 April 2017)

1.    3S-Smart Software Solutions GmbH CODESYS Web Server https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02

2.    Apple products https://support.apple.com/kb/HT207600 https://support.apple.com/kb/HT207615 https://support.apple.com/kb/HT207617 https://support.apple.com/zh-hk/HT207607

3.     CentOS
https://lists.centos.org/pipermail/centos-announce/2017-March/022347.html https://lists.centos.org/pipermail/centos-announce/2017-March/022349.html

4.     Debian
https://www.debian.org/security/2017/dsa-3817 https://www.debian.org/security/2017/dsa-3818 https://www.debian.org/security/2017/dsa-3819 https://www.debian.org/security/2017/dsa-3820 https://www.debian.org/security/2017/dsa-3821 https://www.debian.org/security/2017/dsa-3822 https://www.debian.org/security/2017/dsa-3823 https://www.debian.org/security/2017/dsa-3824

5.     F5 Products https://support.f5.com/csp/article/K18015201

6.     Gentoo Linux
https://security.gentoo.org/glsa/201703-04 https://security.gentoo.org/glsa/201703-05 https://security.gentoo.org/glsa/201703-06 https://security.gentoo.org/glsa/201703-07

7.     Google Chrome
https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html

8.    Huawei Video Content Management Products http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en

9.    IBM Notes http://www-01.ibm.com/support/docview.wss?uid=swg21990421 http://www-01.ibm.com/support/docview.wss?uid=swg21990658

10.    Mageia http://advisories.mageia.org/MGASA-2017-0083.html http://advisories.mageia.org/MGASA-2017-0084.html http://advisories.mageia.org/MGASA-2017-0085.html http://advisories.mageia.org/MGASA-2017-0086.html http://advisories.mageia.org/MGASA-2017-0087.html http://advisories.mageia.org/MGASA-2017-0088.html http://advisories.mageia.org/MGASA-2017-0089.html http://advisories.mageia.org/MGASA-2017-0090.html http://advisories.mageia.org/MGASA-2017-0091.html http://advisories.mageia.org/MGASA-2017-0092.html http://advisories.mageia.org/MGASA-2017-0093.html http://advisories.mageia.org/MGASA-2017-0094.html

11.    NTP http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu https://www.hkcert.org/my_url/en/alert/17032701

12.    Oracle Linux https://linux.oracle.com/errata/ELSA-2017-3531.html https://linux.oracle.com/errata/ELSA-2017-0565.html https://linux.oracle.com/errata/ELSA-2017-0725.html https://linux.oracle.com/errata/ELSA-2017-0817.html https://linux.oracle.com/errata/ELSA-2017-0680.html https://linux.oracle.com/errata/ELSA-2017-0654.html https://linux.oracle.com/errata/ELSA-2017-0631.html https://linux.oracle.com/errata/ELSA-2017-0744.html https://linux.oracle.com/errata/ELSA-2017-0794.html https://linux.oracle.com/errata/ELSA-2017-0662.html https://linux.oracle.com/errata/ELSA-2017-0564.html https://linux.oracle.com/errata/ELSA-2017-0630.html https://linux.oracle.com/errata/ELSA-2017-0621.html https://linux.oracle.com/errata/ELSA-2017-0641.html https://linux.oracle.com/errata/ELSA-2017-0574.html https://linux.oracle.com/errata/ELSA-2017-0847.html

13.    Samba https://www.samba.org/samba/security/CVE-2017-2619.html https://www.hkcert.org/my_url/en/alert/17032702

14.    Schneider Electric Products https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01 https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02

15. Siemens RUGGEDCOM VPN Products
https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01

16.    Slackware http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackwaresecurity.435262 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackwaresecurity.438176 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackwaresecurity.370121

17.    SUSE https://www.suse.com/support/update/announcement/2017/suse-su-20170839-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170841-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170848-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170853-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170855-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170858-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170859-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170860-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170862-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170864-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170865-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170866-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170867-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170868-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170869-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170870-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170871-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170872-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170873-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170874-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170875-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170876-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170877-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170878-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170879-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170880-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170881-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170882-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170883-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170884-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170885-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170886-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170887-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170888-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170889-1.html

18.    Ubuntu https://www.ubuntu.com/usn/usn-3233-1/ https://www.ubuntu.com/usn/usn-3239-3/ https://www.ubuntu.com/usn/usn-3244-1/ https://www.ubuntu.com/usn/usn-3245-1/ https://www.ubuntu.com/usn/usn-3246-1/ https://www.ubuntu.com/usn/usn-3247-1/ https://www.ubuntu.com/usn/usn-3236-1/ https://www.ubuntu.com/usn/usn-3248-1/ https://www.ubuntu.com/usn/usn-3249-1/ https://www.ubuntu.com/usn/usn-3249-2/ https://www.ubuntu.com/usn/usn-3250-1/ https://www.ubuntu.com/usn/usn-3250-2/ https://www.ubuntu.com/usn/usn-3251-1/ https://www.ubuntu.com/usn/usn-3251-2/ https://www.ubuntu.com/usn/usn-3216-2/ https://www.ubuntu.com/usn/usn-3242-2/

19.    VMware Products http://www.vmware.com/security/advisories/VMSA-2017-0006.html
20.    Windows Server 2003 IIS 6.0 https://nvd.nist.gov/vuln/detail/CVE-2017-7269
https://www.us-cert.gov/ncas/current-activity/2017/03/30/Internet-Information-Services-IIS-60Vulnerability

21.    Xen http://xenbits.xen.org/xsa/advisory-206.html