30日 木曜日、友引

+ CESA-2015:1513 Important CentOS 7 bind Security Update
http://lwn.net/Alerts/652757/

+ CESA-2015:1514 Important CentOS 5 bind Security Update
http://lwn.net/Alerts/652758/

+ CESA-2015:1515 Important CentOS 5 bind97 Security Update
http://lwn.net/Alerts/652759/

+ UPDATE: OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl

+ JVNVU#91955066 ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU91955066/

+ FreeBSD TCP Reassembly Flaw Lets Remote Users Consume Excessive Memory Resources
http://www.securitytracker.com/id/1033111
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1417

+ FreeBSD patch(1) Lets Remote Users Execute Arbitrary Commands on the Target System
http://www.securitytracker.com/id/1033110
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1416

+ ISC BIND TKEY Query Processing Flaw Lets Remote Users Cause the Target Service to Crash
http://www.securitytracker.com/id/1033100
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477

+ McAfee Application Control Bypass / Driver Issues
http://cxsecurity.com/issue/WLB-2015070137

JVNDB-2015-000109 yoyaku_v41 における OS コマンドインジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000109.html

JVNDB-2015-000108 yoyaku_v41 における認証回避の脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000108.html

JVNDB-2015-000107 yoyaku_v41 における任意のファイルを作成される脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000107.html

チェックしておきたい脆弱性情報＜2015.07.29＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/072700068/?ST=security

JVNVU#92141772 Android Stagefright に複数の脆弱性
http://jvn.jp/vu/JVNVU92141772/