24日 火曜日、仏滅

+ RHSA-2015:2504 Moderate: libreport security update
https://rhn.redhat.com/errata/RHSA-2015-2504.html
CVE-2015-5302

+ RHSA-2015:2505 Moderate: abrt and libreport security update
https://rhn.redhat.com/errata/RHSA-2015-2505.html
CVE-2015-5273
CVE-2015-5287
CVE-2015-5302

+ phpMyAdmin 4.5.2 released
https://www.phpmyadmin.net/files/4.5.2/

+ Squid 3.5.11 released
http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.11-RELEASENOTES.html

+ Wireshark 2.0.0 Released
https://www.wireshark.org/docs/relnotes/wireshark-2.0.0.html

+ Cisco Virtual Topology System TCP Connection Functionality Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-vts
CVE-2015-6377

+ Cisco Firepower 9000 Operating System Command Injection Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-fire
CVE-2015-6380

+ Adobe ColdFusion Input Validation Flaws Lets Remote Conduct Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1034211
CVE-2015-8052
CVE-2015-8053

+ Adobe LiveCycle XML Document Processing Flaw Lets Remote Users Conduct Cross-Site Request Forgery Attacks
http://www.securitytracker.com/id/1034210
CVE-2015-5255

+ Red Hat Enterprise Linux Grub2 Bug Lets Local Users Bypass Secure Boot
http://www.securitytracker.com/id/1034198
CVE-2015-5281

JVNDB-2015-005909 ArcSight Management Center および ArcSight Logger におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005909.html

JVNDB-2015-000184 Void におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000184.html

武蔵野銀、個人と法人向けにトランザクション認証機能付きワンタイムパスワードを導入
http://itpro.nikkeibp.co.jp/atcl/news/15/112003809/?ST=security

UPDATE: JVN#48135658 複数のルータ製品におけるクリックジャッキングの脆弱性
http://jvn.jp/jp/JVN48135658/

JVN#51046809 ArcSight Management Center および ArcSight Logger におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN51046809/

JVN#20649799 Void におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN20649799/

VU#428280 CSL DualCom GPRS CS2300-R alarm signalling boards contain multiple vulnerabilties
http://www.kb.cert.org/vuls/id/428280

VU#419568 ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
http://www.kb.cert.org/vuls/id/419568