17日 木曜日、大安

+ RHSA-2015:2658 Important: bind97 security update
https://rhn.redhat.com/errata/RHSA-2015-2658.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000

+ RHSA-2015:2657 Critical: firefox security update
https://rhn.redhat.com/errata/RHSA-2015-2657.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7201
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7205
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7210
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7212
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7214
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7222

+ RHSA-2015:2656 Important: bind security update
https://rhn.redhat.com/errata/RHSA-2015-2656.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000

+ RHSA-2015:2655 Important: bind security update
https://rhn.redhat.com/errata/RHSA-2015-2655.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000

+ CESA-2015:2653 Moderate CentOS 7 grub2 Security Update
http://lwn.net/Alerts/668099/

+ Cisco Application Policy Infrastructure Controller Insecure Credentials Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151216-apic
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6424

+ UPDATE: Multiple Vulnerabilities in OpenSSL (December 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl

+ Linux kernel 3.18.25 released
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.25

+ UPDATE: Oracle Solaris Third Party Bulletin - October 2015
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

+ Samba 4.3.3, 4.2.7, 4.1.22 released
https://www.samba.org/samba/history/samba-4.3.3.html
https://www.samba.org/samba/history/samba-4.2.7.html
https://www.samba.org/samba/history/samba-4.1.22.html

+ CTX203787 Multiple SQL Injection Vulnerabilities in Citrix Command Center Web User Interface Java Servlets
http://support.citrix.com/article/CTX203787
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7999

+ FreeBSD-SA-15:27.bind BIND remote denial of service vulnerability
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:27.bind.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000

+ FreeBSD-SA-15:26.openssl Multiple OpenSSL vulnerabilities
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:26.openssl.asc

+ JVNVU#97216921 ISC BIND 9 に複数のサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU97216921/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8461

+ Kaspersky Anti-Virus Virtual Keyboard Input Validation Flaw Lets Remote Users Traverse the Directory to View Files on the Target System SecurityTracker
http://www.securitytracker.com/id/1034433

PostgreSQL PHP Generator 15.12 released
http://www.postgresql.org/about/news/1630/

気になるキーワード
最新事情を踏まえて知りたいセキュリティキーワード「匿名加工情報」
http://itpro.nikkeibp.co.jp/atcl/column/15/121400285/121400003/?ST=security

FinTechの旗手たち
「フラットな基盤で格差なくす」、メタップスの佐藤代表取締役に聞く
http://itpro.nikkeibp.co.jp/atcl/column/15/121000283/121000005/?ST=security

チェックしておきたい脆弱性情報＜2015.12.17＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/121500090/?ST=security

記者の眼
運転打ち切りの山手線新型電車「E235系」、ソフトのバグで電車が止まる時代に
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/121500443/?ST=security

オプティムがMDMソフト「Optimal Biz」に新版、Windows版のセキュリティ機能を向上
http://itpro.nikkeibp.co.jp/atcl/news/15/121604103/?ST=security

IoT機器をボット化するサイバー攻撃が増加、警察庁
http://itpro.nikkeibp.co.jp/atcl/news/15/121604102/?ST=security

英当局、香港玩具メーカーへの不正アクセスに関わった男を逮捕
http://itpro.nikkeibp.co.jp/atcl/news/15/121604092/?ST=security

さくらインターネットとテックビューロ、ブロックチェーン実験環境を無償提供へ
http://itpro.nikkeibp.co.jp/atcl/news/15/121504084/?ST=security

エレコム、IEEE 8021X認証対応の5GHz帯専用無線LAN子機
http://itpro.nikkeibp.co.jp/atcl/news/15/121504085/?ST=security