16日 木曜日、赤口

+ RHSA-2015:1230 Important: java-1.7.0-openjdk security update
https://rhn.redhat.com/errata/RHSA-2015-1230.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760

+ RHSA-2015:1229 Critical: java-1.7.0-openjdk security update
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760

+ RHSA-2015:1228 Important: java-1.8.0-openjdk security update
https://rhn.redhat.com/errata/RHSA-2015-1228.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2659
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3149
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760

+ UPDATE: OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl

+ Cisco Videoscape Delivery System Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150715-vds
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0725

+ UPDATE: Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl

+ Windows 7/8 32bits and WS2012 RDP Remote Code Execution
http://cxsecurity.com/issue/WLB-2015070075
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2373

JVNDB-2015-000099 Thetis における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000099.html

JVNDB-2015-000098 acmailer におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000098.html

IT部門への“極言暴論”を斬る 長谷島×木村直接対決
第2回：「CIO不要論」はビジネスを破綻させる
http://itpro.nikkeibp.co.jp/atcl/column/15/070900168/070900002/?ST=security

チェックしておきたい脆弱性情報＜2015.07.16＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/070700067/?ST=security

IPAがFlash Playerの欠陥で改めて注意喚起、国内でサイバー攻撃活動を確認
http://itpro.nikkeibp.co.jp/atcl/news/15/071502389/?ST=security

学研、Webサイトへの不正アクセスで最大2万2108人の情報が流出か
http://itpro.nikkeibp.co.jp/atcl/news/15/071502379/?ST=security

Mozilla、セキュリティ対策として「Firefox」でFlashを一時無効に
http://itpro.nikkeibp.co.jp/atcl/news/15/071502376/?ST=security

JVN#19011483 Thetis における SQL インジェクションの脆弱性
http://jvn.jp/jp/JVN19011483/

JVN#64051989 acmailer におけるディレクトリトラバーサルの脆弱性
http://jvn.jp/jp/JVN64051989/

JVNVU#94770908 Adobe Flash Player (BitmapData) に解放済みメモリ使用 (use-after-free) の脆弱性
http://jvn.jp/vu/JVNVU94770908/

JVNVU#93769860 Adobe Flash Player (opaqueBackground) に解放済みメモリ使用 (use-after-free) の脆弱性
http://jvn.jp/vu/JVNVU93769860/