25日 水曜日、大安

+ PuTTY 0.66 released
http://www.chiark.greenend.org.uk/~sgtatham/putty/

+ Ubuntu 15.10 released
https://wiki.ubuntu.com/WilyWerewolf/ReleaseNotes

+ UPDATE: Cisco IOS Software Smart Install Remote Code Execution Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-smart-install

+ Cisco Unified CallManager and Unified Presence Server ICMP Echo Request Handling Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070328-CVE-2007-1834
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1834

+ UPDATE: Cisco Prime Central for HCS Multiple Cross-Site Request Forgery Vulnerabilities
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150520-CVE-2015-0741

+ UPDATE: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp

+ Cisco ASA Management Interface XML Parser Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-asa
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6379

+ OpenLDAP Cipherstring Parsing Bug Lets Remote Users Downgrade the Encryption Cipher
http://www.securitytracker.com/id/1034221
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3276

+ VU#925497 Dell System Detect installs root certificate and private key (DSDTestProvider)
http://www.kb.cert.org/vuls/id/925497

+ VU#870761 Dell Foundation Services installs root certificate and private key (eDellRoot)
http://www.kb.cert.org/vuls/id/870761

JVNVU#94334814 CSL DualCom GPRS CS2300-R に複数の脆弱性
http://jvn.jp/vu/JVNVU94334814/

JVNVU#90662356 ARRIS 製ケーブルモデムに複数の脆弱性
http://jvn.jp/vu/JVNVU90662356/

シェラトンやウェスティンなど50軒以上の北米ホテルで顧客データ流出
http://itpro.nikkeibp.co.jp/atcl/news/15/112403819/?ST=security

認証標準化団体が「FIDO 2.0」のWeb API仕様をW3Cに提案、パスワードレス普及へ一歩
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/112300385/?ST=security