12日 木曜日、先負

+ RHSA-2016:1025 Important: pcre security update
https://rhn.redhat.com/errata/RHSA-2016-1025.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3217
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5073
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3191

+ Google Chrome 50.0.2661.102 released
http://googlechromereleases.blogspot.jp/2016/05/stable-channel-update.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1667
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1668
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1669
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1670
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1671

+ Mozilla Thunderbird 45.1.0 released
https://www.mozilla.org/en-US/thunderbird/45.1.0/releasenotes/

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl

+ UPDATE: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd

+ Linux kernel 4.5.4, 4.4.10, 4.1.24, 3.18.33, 3.14.69 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.10
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.24
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.33
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.69

+ SA70517 Linux Kernel ALSA Multiple Information Disclosure Vulnerabilities
https://secunia.com/advisories/70517/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4569

+ SA70515 Linux Kernel "x25_negotiate_facilities()" Information Disclosure Vulnerability
https://secunia.com/advisories/70515/

+ SA70535 McAfee Agent Multiple Vulnerabilities
https://secunia.com/advisories/70535/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755

+ Apache Struts 2.5 released
http://struts.apache.org/announce.html#a20160509

+ UPDATE: JVNVU#93163809 OpenSSL に複数の脆弱性
http://jvn.jp/vu/JVNVU93163809/index.html

+ Adobe Reader DC 15.010.20060 - Memory Corruption
https://cxsecurity.com/issue/WLB-2016050042

+ Windows Media Player MediaInfo v0.7.61 - Buffer Overflow Exploit
https://cxsecurity.com/issue/WLB-2016050041

JVNDB-2016-000059 Apache Cordova において任意のプラグインが実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000059.html

JVNDB-2016-000058 Apache Cordova におけるアクセス制限不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000058.html