16日 月曜日、先勝

+ CESA-2016:1041 Important CentOS 7 thunderbird Security Update
http://lwn.net/Alerts/687376/

+ Cisco Industrial Ethernet 4000 and Ethernet 5000 Series Switches ICMP IPv4 Packet Corruption Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160513-ies
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1399

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl

+ UPDATE: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd

+ SA70561 Symantec Messaging Gateway OpenSSL Heartbeat Two Information Disclosure Vulnerabilities
https://secunia.com/advisories/70561/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160

+ SA70593 McAfee ePolicy Orchestrator Oracle Java Multiple Vulnerabilities
https://secunia.com/advisories/70593/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0695
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3425
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3427

+ PostgreSQL 9.5.3, 9.4.8, 9.3.13, 9.2.17, 9.1.22 Released!
http://www.postgresql.org/about/news/1669/
http://www.postgresql.org/docs/9.5/static/release-9-5-3.html
http://www.postgresql.org/docs/9.4/static/release-9-4-8.html
http://www.postgresql.org/docs/9.3/static/release-9-3-13.html
http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
http://www.postgresql.org/docs/9.1/static/release-9-1-22.html

+ Sysstat 11.2.4 released (stable version)
http://sebastien.godard.pagesperso-orange.fr/

+ Linux Kernel bpf related UAF
https://cxsecurity.com/issue/WLB-2016050055
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4794

VU#785823 Lantronix xPrintServer contains multiple vulnerabilities
https://www.kb.cert.org/vuls/id/785823

JVNDB-2016-000064 WordPress 用プラグイン「Ninja Forms」における PHP オブジェクトインジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000064.html

JVNDB-2016-000063 FileMaker Server において PHP ソースコードが閲覧可能な問題
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000063.html

ITpro Report
FBI vs アップルは他人事ではない！日本の捜査機関はどこまでスマホを覗けるか、全貌に迫る
http://itpro.nikkeibp.co.jp/atcl/column/14/090100053/051300151/?ST=security

富士通、セキュリティ対策の計画策定を支援するサービスを開始
http://itpro.nikkeibp.co.jp/atcl/news/16/051301368/?ST=security