1日 水曜日、大安

+ RHSA-2016:1137 Important: openssl security update
https://rhn.redhat.com/errata/RHSA-2016-1137.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108

+ RHSA-2016:1140 Moderate: squid34 security update
https://rhn.redhat.com/errata/RHSA-2016-1140.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4051
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4052
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4553
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4554
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4556

+ RHSA-2016:1138 Moderate: squid security update
https://rhn.redhat.com/errata/RHSA-2016-1138.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4051
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4052
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4554
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4556

+ RHSA-2016:1141 Moderate: ntp security update
https://rhn.redhat.com/errata/RHSA-2016-1141.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7979
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1547
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1548
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1550
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2518

+ RHSA-2016:1139 Moderate: squid security update
https://rhn.redhat.com/errata/RHSA-2016-1139.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4051
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4052
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4553
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4554
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4556

+ CESA-2016:1138 Moderate CentOS 6 squid Security Update
http://lwn.net/Alerts/689192/

+ CESA-2016:1141 Moderate CentOS 6 ntp Security Update
http://lwn.net/Alerts/689189/

+ CESA-2016:1139 Moderate CentOS 7 squid Security Update
http://lwn.net/Alerts/689193/

+ CESA-2016:1137 Important CentOS 5 openssl Security Update
http://lwn.net/Alerts/689191/

+ CESA-2016:1141 Moderate CentOS 7 ntp Security Update
http://lwn.net/Alerts/689190/

+ CESA-2016:1140 Moderate CentOS 6 squid34 Security Update
http://lwn.net/Alerts/689194/

+ UPDATE: Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6

+ Cisco ESA and WSA AMP ClamAV Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160531-wsa-esa
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1405

+ UPDATE: Oracle Solaris Third Party Bulletin - April 2016
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

+ HS16-016 XML External Entity (XXE) Vulnerability in Cominexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS16-016/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254

+ HS16-016 CosminexusにおけるXXEに関する脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-016/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254

+ FreeBSD-SA-16:23.libarchive Buffer overflow in libarchive(3)
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:23.libarchive.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0211

+ FreeBSD-SA-16:22.libarchive Directory traversal in cpio(1)
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:22.libarchive.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2304

+ FreeBSD-SA-16:21.43bsd Kernel stack disclosure in 4.3BSD compatibility layer
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:21.43bsd.asc

+ FreeBSD-SA-16:20.linux Kernel stack disclosure in Linux compatibility layer
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:20.linux.asc

10の疑問を試して解明 セキュリティ大実験室
スマホの顔認証は正確か？
http://itpro.nikkeibp.co.jp/atcl/column/16/052300113/052300007/?ST=security

ラッコの眼 ～サイバーセキュリティ最前線～
情報漏洩の温床、「匿名FTPサーバー」の再点検を
http://itpro.nikkeibp.co.jp/atcl/column/15/071200172/053000010/?ST=security

ログ解析とF/Wで情報漏えいを防止、日立ソリューションズとBBSecが提供
http://itpro.nikkeibp.co.jp/atcl/news/16/053101563/?ST=security

10の疑問を試して解明 セキュリティ大実験室
パターンロックを見抜けるか？
http://itpro.nikkeibp.co.jp/atcl/column/16/052300113/052300006/?ST=security