14日 木曜日、仏滅

+ RHSA-2015:1002 Important: xen security update
https://rhn.redhat.com/errata/RHSA-2015-1002.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456

+ RHSA-2015:0998 Important: qemu-kvm security update
https://rhn.redhat.com/errata/RHSA-2015-0998.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456

+ RHSA-2015:0999 Important: qemu-kvm security update
https://rhn.redhat.com/errata/RHSA-2015-0999.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456

+ CESA-2015:0988 Critical CentOS 7 firefox Security Update
http://lwn.net/Alerts/644216/

+ CESA-2015:0988 Critical CentOS 6 firefox Security Update
http://lwn.net/Alerts/644215/

+ CESA-2015:0986 Moderate CentOS 7 kexec-tools Security Update
http://lwn.net/Alerts/644217/

+ CESA-2015:0980 Important CentOS 7 pcs Security Update
http://lwn.net/Alerts/644219/

+ CESA-2015:0983 Moderate CentOS 7 tomcat Security Update
http://lwn.net/Alerts/644220/

+ CESA-2015:0990 Important CentOS 6 pcs Security Update
http://lwn.net/Alerts/644218/

+ CESA-2015:0991 Moderate CentOS 6 tomcat6 Security Update
http://lwn.net/Alerts/644221/

+ phpMyAdmin 4.4.6.1 released
https://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/4.4.6.1/phpMyAdmin-4.4.6.1-notes.html/view

+ PMASA-2015-3 Vulnerability allowing man-in-the-middle attack on API call to GitHub
http://www.phpmyadmin.net/home_page/security/PMASA-2015-3.php

+ Multiple Vulnerabilities in Cisco TelePresence TC and TE Software
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2174
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0722

+ Command Injection Vulnerability in Multiple Cisco TelePresence Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0713

+ Linux kernel 4.0.3, 3.14.42, 3.10.78 released
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.42
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.78

+ Citrix Security Advisory for CVE-2015-3456
http://support.citrix.com/article/CTX201078
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456

+ Apache Struts 2.3.24 released
http://struts.apache.org/announce.html#a20150507

+ Dovecot 2.2.17 released
http://www.dovecot.org/list/dovecot-news/2015-May/000292.html

Adobe Reader および Acrobat の脆弱性 (APSB15-10) に関する注意喚起
http://www.jpcert.or.jp/at/2015/at150014.html

Adobe Flash Player の脆弱性 (APSB15-09) に関する注意喚起
http://www.jpcert.or.jp/at/2015/at150013.html

2015年5月 Microsoft セキュリティ情報 (緊急 3件含) に関する注意喚起
http://www.jpcert.or.jp/at/2015/at150012.html

チェックしておきたい脆弱性情報＜2015.05.13＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/051000057/?ST=security