21日 月曜日、先負

+ UPDATE: Cisco Web Security Appliance Malformed HTTP Response Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150909-CVE-2015-6290

+ UPDATE: Multiple Vulnerabilities in OpenSSL (December 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl

+ UPDATE: Vulnerability in Java Deserialization Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-java-deserialization

+ UPDATE: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp

+ Cisco IOS and IOS XE Software IKEv1 State Machine Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6429

+ CTX203879 Citrix XenServer Multiple Security Updates
http://support.citrix.com/article/CTX203879
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8554
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8104
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8555

+ CTX203787 Multiple SQL Injection Vulnerabilities in Citrix Command Center Web User Interface Java Servlets
http://support.citrix.com/article/CTX203787
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7999

+ VMSA-2015-0009 VMware product updates address a critical deserialization vulnerability
http://www.vmware.com/security/advisories/VMSA-2015-0009.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6934

+ iptables 1.6.0 released
http://www.hu.netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt

+ Samba Multiple Flaws Let Remote Users Access Data and Files, Obtain Potentially Sensitive Information, and Deny Service
http://www.securitytracker.com/id/1034493
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3223
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5252
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5296
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5299
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5330
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8467

+ Samba LDAP Memory Consumption Flaw Lets Remote Users Cause the Target System to Crash
http://www.securitytracker.com/id/1034492
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7540

+ Google Chrome Bugs Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1034491
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6792

PostgreSQL 9.5 RC1 Released
http://www.postgresql.org/about/news/1631/