8日 水曜日、先負

+ RHSA-2015:1210 Moderate: abrt security update
https://rhn.redhat.com/errata/RHSA-2015-1210.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1869
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3142
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3147
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3159
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3315

+ Google Chrome 43.0.2357.132 released
http://googlechromereleases.blogspot.jp/2015/07/stable-channel-update.html

+ APSA15-03 Security Advisory for Adobe Flash Player
https://helpx.adobe.com/security/products/flash-player/apsa15-03.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5119

+ CESA-2015:1207 Critical CentOS 7 firefox Security Update
http://lwn.net/Alerts/650384/

+ CESA-2015:1207 Critical CentOS 6 firefox Security Update
http://lwn.net/Alerts/650383/

+ CESA-2015:1207 Critical CentOS 5 firefox Security Update
http://lwn.net/Alerts/650382/

+ BIND 9.10.2-P2, 9.9.7-P1 released
http://ftp.isc.org/isc/bind9/9.10.2-P2/RELEASE-NOTES-9.10.2-P2.html
http://ftp.isc.org/isc/bind9/9.9.7-P1/RELEASE-NOTES-9.9.7-P1.html

+ UPDATE: Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl

+ Apache Tomcat 8.0.24, 7.0.63 released
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.24_(markt)
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html

+ FreeBSD-SA-15:11.bind BIND resolver remote denial of service when validating
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:11.bind.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4620

+ Sendmail 8.15.2 released
http://sendmail.com/sm/open_source/download/8.15.2/

+ VU#561288 Adobe Flash ActionScript 3 ByteArray use-after-free vulnerability
http://www.kb.cert.org/vuls/id/561288
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5119

+ ISC BIND DNSSEC Validation Flaw Lets Remote Users Deny Service in Certain Cases
http://www.securitytracker.com/id/1032799
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4620

+ CVE-2015-4620: Specially Constructed Zone Data Can Cause a Resolver to Crash when Validating
https://kb.isc.org/article/AA-01267
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4620

+ Linux Kernel UDP Processing Flaw Lets Remote Users Deny Service
http://www.securitytracker.com/id/1032794
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5364
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5366

Open-Source Streaming-SQL Database PipelineDB Now Available
http://www.postgresql.org/about/news/1596/

IIJがサイバー攻撃の早期検知サービス、複数のログを分析
http://itpro.nikkeibp.co.jp/atcl/news/15/070702261/?ST=security

政府に監視ソフトを販売するイタリア企業がハッキング被害に
http://itpro.nikkeibp.co.jp/atcl/news/15/070702251/?ST=security

JVNVU#92209185 ANTLabs InnGate に複数の脆弱性
http://jvn.jp/vu/JVNVU92209185/

VU#253708 Grandsteam GXV3611_HD camera is vulnerable to SQL injection
http://www.kb.cert.org/vuls/id/253708