22日 水曜日、仏滅

+ RHSA-2016:1267 Important: setroubleshoot and setroubleshoot-plugins security update
https://rhn.redhat.com/errata/RHSA-2016-1267.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4444
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4445
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4446
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4989

+ About the security content of AirPort Base Station Firmware Update 7.6.7 and 7.7.7
https://support.apple.com/ja-jp/HT206849
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7029

+ UPDATE: Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3

+ UPDATE: Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv2

+ UPDATE: Cisco RV110W, RV130W, and RV215W Routers Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv1

+ UPDATE: Cisco RV110W, RV130W, and RV215W Routers Arbitrary Code Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv

+ Cisco Prime Collaboration Deployment SQL Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-pcd
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1437

+ Cisco ASR 5000 Series Packet Data Network Gateway Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-asr
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1436

+ SA71281 PHP Multiple Vulnerabilities
https://secunia.com/advisories/71281/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4473

+ Apache Tomcat 7.0.70 released
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html

+ UPDATE: JVNVU#91383623 ISC BIND 9 に複数の脆弱性
http://jvn.jp/vu/JVNVU91383623/

+ UPDATE: JVNVU#97216921 ISC BIND 9 に複数のサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU97216921/

+ UPDATE: JVNVU#99125992 SSL/TLS の実装が輸出グレードの RSA 鍵を受け入れる問題 (FREAK 攻撃)
http://jvn.jp/vu/JVNVU99125992/

+ UPDATE: JVNVU#93531657 ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU93531657/

+ UPDATE: JVNVU#99160787 OpenSSL に証明書チェーンの検証不備の脆弱性
http://jvn.jp/vu/JVNVU99160787/index.html

+ UPDATE: JVNVU#96605606 Network Time Protocol daemon (ntpd) に複数の脆弱性
http://jvn.jp/vu/JVNVU96605606/index.html

+ Apple AirPort DNS Processing Flaw Lets Remote Users Execute Arbitrary Code on the Target System
http://www.securitytracker.com/id/1036136
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7029

UPDATE: JVNVU#91475438 Internet Key Exchange (IKEv1, IKEv2) が DoS 攻撃の踏み台として使用される問題
http://jvn.jp/vu/JVNVU91475438/

UPDATE: JVN#49154900 Spring Framework におけるディレクトリトラバーサルの脆弱性
http://jvn.jp/jp/JVN49154900/index.html

News ＆ Trend
Watsonでサイバー攻撃を分析、新種の防御サービス続々
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/061700552/?ST=security

統計＆調査
［データは語る］2015年度の国内のEDR市場は10億5000万円、2020年度には52億円に―ITR
http://itpro.nikkeibp.co.jp/atcl/news/14/110601779/062100651/?ST=security

GMOメイクショップが情報漏洩事故を再調査、2年前の調査を大幅に上回る規模と判明
http://itpro.nikkeibp.co.jp/atcl/news/16/062101802/?ST=security

「企業自ら攻撃に気づいたのは12％だけ」、SecureWorksが標的型攻撃の痕跡を見つけるサービス
http://itpro.nikkeibp.co.jp/atcl/news/16/062101803/?ST=security