30日 金曜日、友引

+ Apache OpenOffice 4.1.2 released
https://cwiki.apache.org/confluence/display/OOOUSERS/AOO+4.1.2+Release+Notes

+ RHSA-2015:1930 Important: ntp security update
https://rhn.redhat.com/errata/RHSA-2015-1930.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5300
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7704

+ RHSA-2015:1943 Moderate: qemu-kvm security update
https://rhn.redhat.com/errata/RHSA-2015-1943.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1779

+ Selenium Client & WebDriver 2.48.2 released
https://raw.githubusercontent.com/SeleniumHQ/selenium/master/java/CHANGELOG

+ Opera 33 released
http://www.opera.com/docs/changelogs/unified/3300/

+ nginx 1.9.6 released
http://nginx.org/en/download.html

+ APSB15-26 Security update available for Adobe Shockwave Player
https://helpx.adobe.com/security/products/shockwave/apsb15-26.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7649

+ CESA-2015:1943 Moderate CentOS 7 qemu-kvm Security Update
http://lwn.net/Alerts/662259/

+ CESA-2015:1930 Important CentOS 6 ntp Security Update
http://lwn.net/Alerts/662160/

+ CESA-2015:1930 Important CentOS 7 ntp Security Update
http://lwn.net/Alerts/662161/

+ CESA-2015:1925 Important CentOS 5 kvm Security Update
http://lwn.net/Alerts/661884/

+ CESA-2015:1924 Important CentOS 6 qemu-kvm Security Update
http://lwn.net/Alerts/661885/

+ CVE-2015-1774: Out-of-Bounds Write in HWP File Filter
http://www.openoffice.org/security/cves/CVE-2015-1774.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1774

+ PDFCreator 2.2.0 released
http://www.pdfforge.org/blog/pdfcreator-220-released

+ phpMyAdmin 4.5.1, 4.4.15.1 released
https://www.phpmyadmin.net/news/2015/10/23/phpmyadmin-451-release-notes/
https://www.phpmyadmin.net/news/2015/10/23/phpmyadmin-44151-release-notes/

+ PMASA-2015-5 Content spoofing vulnerability when redirecting user to an external site
https://www.phpmyadmin.net/security/PMASA-2015-5/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7873

+ VMware Workstation 12.0.1 Player released
https://pubs.vmware.com/Release_Notes/en/workstation/12player/player-1201-release-notes.html

+ Linux kernel 4.2.5, 4.1.12, 3.18.23, 3.14.56, 3.10.92 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.5
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.12
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.23
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.56
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.92

+ UPDATE: Oracle Solaris Third Party Bulletin - October 2015
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

+ Samba 4.2.5 Available for Download
http://samba.org/samba/history/samba-4.2.5.html

+ HS15-027 Multiple Vulnerabilities in Cosminexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-027/index.html

+ HS15-026 Multiple Vulnerabilities in Cosminexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-026/index.html

+ HS15-027 Cosminexusにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS15-027/index.html

+ HS15-026 Cosminexusにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS15-026/index.html

+ FreeBSD-SA-15:25.ntp Multiple vulnerabilities of ntp
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:25.ntp.asc

+ Sysstat 11.0.8 released
http://sebastien.godard.pagesperso-orange.fr/

+ Linux Kernel <= 3.18 Buffer overflow when copying data from skbuff to userspace
https://cxsecurity.com/issue/WLB-2015100170
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8019

VU#573848 Qolsys IQ Panel contains multiple vulnerabilities
http://www.kb.cert.org/vuls/id/573848

VU#350508 HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password
http://www.kb.cert.org/vuls/id/350508

VU#672500 EPSON Network Utility contains a privilege escalation vulnerability
http://www.kb.cert.org/vuls/id/672500