12日 火曜日、友引

+ PostgreSQL ODBC Driver 09_05_0100 released
http://www.postgresql.org/ftp/odbc/versions/msi/

+ CESA-2016:0008 Moderate CentOS 6 openssl Security Update
http://lwn.net/Alerts/671026/

+ CESA-2016:0009 Moderate CentOS 7 libldb Security Update
http://lwn.net/Alerts/671023/

+ CESA-2016:0005 Moderate CentOS 6 rpcbind Security Update
http://lwn.net/Alerts/671028/

+ CESA-2016:0010 Moderate CentOS 6 samba4 Security Update
http://lwn.net/Alerts/671032/

+ CESA-2016:0005 Moderate CentOS 7 rpcbind Security Update
http://lwn.net/Alerts/671029/

+ CESA-2016:0007 Moderate CentOS 6 nss Security Update
http://lwn.net/Alerts/671024/

+ CESA-2016:0012 Moderate CentOS 7 gnutls Security Update
http://lwn.net/Alerts/671021/

+ CESA-2016:0011 Moderate CentOS 6 samba Security Update
http://lwn.net/Alerts/671030/

+ CESA-2016:0008 Moderate CentOS 7 openssl Security Update
http://lwn.net/Alerts/671027/

+ CESA-2016:0006 Moderate CentOS 7 samba Security Update
http://lwn.net/Alerts/671031/

+ CESA-2016:0012 Moderate CentOS 6 gnutls Security Update
http://lwn.net/Alerts/671020/

+ CESA-2016:0007 Moderate CentOS 7 nss Security Update
http://lwn.net/Alerts/671025/

+ CESA-2016:0009 Moderate CentOS 6 libldb Security Update
http://lwn.net/Alerts/671022/

+ UPDATE: Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150320-openssl

+ Cisco Adaptive Security Appliance Non-DCERPC Traffic Bypass Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160111-asa
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6423

+ Linux kernel 3.12.52 released
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.52

+ NTP 4.2.8p5 released
http://archive.ntp.org/ntp4/ChangeLog-stable

+ Mozilla Firefox 44.0b2 Local Cross-site Scripting Vulnerability
https://cxsecurity.com/issue/WLB-2016010055

+ Symantec Endpoint Protection 12.1.4013 Denial Of Service
https://cxsecurity.com/issue/WLB-2016010045

dbMigration .NET 2.3 released
http://www.postgresql.org/about/news/1639/

Windows build of PostgreSQL 9.5.0 prepared by Postgres Pro
http://www.postgresql.org/about/news/1638/

2UDA 9.5 Released
http://www.postgresql.org/about/news/1637/

ラッコの眼 ～サイバーセキュリティ最前線～
無差別化するDDoS攻撃、どう対峙すべきかを考える
http://itpro.nikkeibp.co.jp/atcl/column/15/071200172/121800008/?ST=security

CTC、危険なIPアドレスリストの配信サービスをパロアルトとSplunk向けに提供
http://itpro.nikkeibp.co.jp/atcl/news/16/010800058/?ST=security

JVNVU#90674343 Ipswitch WhatsUp Gold の XML オブジェクトのデシリアライズ処理に脆弱性
http://jvn.jp/vu/JVNVU90674343/index.html

UPDATE: JVNVU#94212028 Ipswitch WhatsUp Gold に SQL インジェクションおよび複数のクロスサイトスクリプティングの脆弱性
http://jvn.jp/vu/JVNVU94212028/index.html