4日 金曜日、仏滅

+ RHSA-2015:1707 Important: bind97 security update
https://rhn.redhat.com/errata/RHSA-2015-1707.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5722

+ RHSA-2015:1706 Important: bind security update
https://rhn.redhat.com/errata/RHSA-2015-1706.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5722

+ RHSA-2015:1715 Important: spice-server security update
https://rhn.redhat.com/errata/RHSA-2015-1715.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3247

+ RHSA-2015:1708 Important: libXfont security update
https://rhn.redhat.com/errata/RHSA-2015-1708.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1802
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1804

+ RHSA-2015:1705 Important: bind security update
https://rhn.redhat.com/errata/RHSA-2015-1705.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5722

+ RHSA-2015:1714 Important: spice security update
https://rhn.redhat.com/errata/RHSA-2015-1714.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3247

+ Red Hat Enterprise Linux 7.2 Beta released
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7-Beta/html/7.2_Release_Notes/index.html

+ CESA-2015:1705 Important CentOS 6 bind Security Update
http://lwn.net/Alerts/656508/

+ CESA-2015:1706 Important CentOS 5 bind Security Update
http://lwn.net/Alerts/656509/

+ CESA-2015:1705 Important CentOS 7 bind Security Update
http://lwn.net/Alerts/656510/

+ CESA-2015:1708 Important CentOS 6 libXfont Security Update
http://lwn.net/Alerts/656512/

+ CESA-2015:1707 Important CentOS 5 bind97 Security Update
http://lwn.net/Alerts/656511/

+ CESA-2015:1708 Important CentOS 7 libXfont Security Update
http://lwn.net/Alerts/656513/

+ squid 3.5.8 released
http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.8-RELEASENOTES.html

+ BIND 9.10.2-P4, 9.9.7-P3 released
ftp://ftp.isc.org/isc/bind9/9.10.2-P4/RELEASE-NOTES.bind-9.10.2-P4.html
ftp://ftp.isc.org/isc/bind9/9.9.7-P3/RELEASE-NOTES.bind-9.9.7-P3.html

+ OpenSSH 6.8-6.9 pty issue can lead to local privesc on Linux
http://cxsecurity.com/issue/WLB-2015090025
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6565

JVNDB-2015-000301 BBS X102 におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000301.html

JVNDB-2015-000302 hitSuji (rktSNS2) におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000302.html

UPDATE: JVNVU#99671861 UPnP を実装した複数のルータ製品にセキュリティ機能の実装が不十分な問題
http://jvn.jp/vu/JVNVU99671861/

JVNVU#92833570 Seagate wireless hard-drive 製品に複数の脆弱性
http://jvn.jp/vu/JVNVU92833570/

JVNVU#92141772 Android Stagefright に複数の脆弱性
http://jvn.jp/vu/JVNVU92141772/

JVNVU#91383623 ISC BIND 9 に複数の脆弱性
http://jvn.jp/vu/JVNVU91383623/

VU#630872 Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N contains multiple vulnerabilities
http://www.kb.cert.org/vuls/id/630872

VU#845332 OrientDB and Studio prior to version 2.1.1 contain multiple vulnerabilities
http://www.kb.cert.org/vuls/id/845332