1日 火曜日、大安

+ phpMyAdmin 4.0.10.15, 4.4.15.5, 4.5.5.1 released
https://www.phpmyadmin.net/files/4.0.10.15/
https://www.phpmyadmin.net/files/4.4.15.5/
https://www.phpmyadmin.net/files/4.5.5.1/

+ PMASA-2016-13 Vulnerability allowing man-in-the-middle attack on API call to GitHub.
https://www.phpmyadmin.net/security/PMASA-2016-13/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2562

+ PMASA-2016-12 Multiple XSS vulnerabilities.
https://www.phpmyadmin.net/security/PMASA-2016-12/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2561

+ PMASA-2016-11 Multiple XSS vulnerabilities.
https://www.phpmyadmin.net/security/PMASA-2016-11/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2560

+ PMASA-2016-10 XSS vulnerability in SQL parser.
https://www.phpmyadmin.net/security/PMASA-2016-10/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2559

+ UPDATE: Vulnerability in GNU glibc Affecting Cisco Products: February 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160218-glibc

+ Cisco Videoscape Distribution Suite for Internet Streaming TCP Session Handling Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160226-vds-is
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1353

+ OpenSSH 7.2 released
http://www.openssh.com/txt/release-7.2

+ Tcl/Tk 8.6.5 released
http://www.tcl.tk/software/tcltk/8.6.html

+ VU#419128 IKE/IKEv2 protocol implementations may allow network amplification attacks
https://www.kb.cert.org/vuls/id/419128

+ JVNVU#91475438 Internet Key Exchange (IKEv1, IKEv2) が DoS 攻撃の踏み台として使用される問題
http://jvn.jp/vu/JVNVU91475438/

VU#938151 Forwarding Loop Attacks in Content Delivery Networks may result in denial of service
https://www.kb.cert.org/vuls/id/938151

記者の眼
あの悪夢が再び？マクロウイルスの逆襲が始まった
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/021900490/?ST=security

辻伸弘の裏読みセキュリティ事件簿
アノニマスは一流ハッカーではない！？ 本当の姿を知り、正しく恐がろう
http://itpro.nikkeibp.co.jp/atcl/column/16/012900025/022500002/?ST=security

1分で理解するプロの知恵［セキュリティ編］
暗号化は鍵管理まで仕様に盛り込め
http://itpro.nikkeibp.co.jp/atcl/column/16/022200041/022200002/?ST=security

慶應と日立がサイバーセキュリティの共同研究開始、「IoTでは全職業にセキュリティが関係」
http://itpro.nikkeibp.co.jp/atcl/news/16/022900617/?ST=security