17日 火曜日、先負

+ RHSA-2015:2065 Important: xen security update
https://rhn.redhat.com/errata/RHSA-2015-2065.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5279

+ VMware Player 7.1.3 released
http://pubs.vmware.com/Release_Notes/en/player/7/player-713-release-notes.html

+ UPDATE: Cisco AsyncOS TCP Flood Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-aos

+ UPDATE: Cisco Email Security Appliance Anti-Spam Scanner Bypass Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-esa

+ UPDATE: Cisco Email Security Appliance Email Scanner Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-esa2

+ UPDATE: Cisco FireSIGHT Management Center Certificate Validation Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-fmc

+ Cisco Mobility Services Engine Static Credential Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6316

+ Cisco Mobility Services Engine Privilege Escalation Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-privmse
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4282

+ UPDATE: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp

+ Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-pca1
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6330

+ Cisco Firepower 9000 Unauthenticated File Access Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-firepower
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6368

+ UPDATE: Oracle Solaris Third Party Bulletin - October 2015
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Barman 1.5.1 released
http://www.postgresql.org/about/news/1626/

Database .NET v17 released
http://www.postgresql.org/about/news/1627/

実践、セキュリティ事故対応
［第2回］巧妙なマルウエアから組織を守れ　防御の弱点を知り抜け道を塞ぐ
http://itpro.nikkeibp.co.jp/atcl/column/15/110900259/110900002/?ST=security

【マイナンバーのセキュリティを急げ！】
ディスカッション2 マイナンバー控えセキュリティ再点検
http://itpro.nikkeibp.co.jp/atcl/column/15/102800253/102800002/?ST=security

JVNVU#94276522 Apache Commons Collections ライブラリのデシリアライズ処理に脆弱性
http://jvn.jp/vu/JVNVU94276522/index.html