3日 木曜日、先勝

+ RHSA-2016:0347 Important: postgresql security update
https://rhn.redhat.com/errata/RHSA-2016-0347.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0773

+ RHSA-2016:0346 Important: postgresql security update
https://rhn.redhat.com/errata/RHSA-2016-0346.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0773

+ Google Chrome 49.0.2623.75 released
http://googlechromereleases.blogspot.jp/2016/03/stable-channel-update.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1630
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1631
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1632
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1633
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1634
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1635
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1636
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8126
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1637
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1638
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1639
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1640
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1641

+ CESA-2016:0301 Important CentOS 7 openssl Security Update
http://lwn.net/Alerts/678386/

+ CESA-2016:0302 Important CentOS 5 openssl Security Update
http://lwn.net/Alerts/678369/

+ UPDATE: Vulnerability in GNU glibc Affecting Cisco Products: February 2016  Updated
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160218-glibc

+ Cisco NX-OS Software TCP Netstack Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-netstack
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0718

+ Cisco NX-OS Software SNMP Packet Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n5ksnmp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6260

+ Cisco Web Security Appliance HTTPS Packet Processing Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-wsa
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1288

+ Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n3k
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1329

+ UPDATE: Multiple Vulnerabilities in OpenSSL (January 2016) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160129-openssl

+ Cisco Policy Suite Confidential Information Disclosure Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1357

+ UPDATE: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: January 2016
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd

+ Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0703
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0704

+ Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cucdm
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1354

+ Cisco FireSIGHT System Software Device Management UI Cross-Site Scripting Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-FireSIGHT
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1355

+ Cisco FireSIGHT System Software Convert Timing Channel Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-FireSIGHT
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1356

+ Cisco Prime Infrastructure Log File Remote Code Execution Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cpi1
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1359

+ HS16-008 Information Disclosure Vulnerability in Hitachi Compute Systems Manager
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS16-008/index.html

+ HS16-008 Hitachi Compute Systems Managerにおける情報漏えいに関する問題
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-008/index.html

+ JVNDB-2016-000032 コレガ製の複数の無線 LAN ルータにおけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000032.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1158

+ JVNVU#90617353 SSLv2 の暗号通信を解読可能な脆弱性 (DROWN 攻撃)
http://jvn.jp/vu/JVNVU90617353/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800

辻伸弘の裏読みセキュリティ事件簿
年金機構事件から学ぶ 個人を責めない、組織として対応する
http://itpro.nikkeibp.co.jp/atcl/column/16/012900025/022500004/?ST=security

1分で理解するプロの知恵［セキュリティ編］
Web脆弱性発見はツールやサービスに頼れ
http://itpro.nikkeibp.co.jp/atcl/column/16/022200041/022200004/?ST=security

松村太郎の生搾りアップル情報
「iPhoneロック解除」論争、ユーザーがあまりAppleの味方にならない理由
http://itpro.nikkeibp.co.jp/atcl/column/14/110600091/030200049/?ST=security