30日 木曜日、赤口

+ PDFCreator 2.3.1 released
http://www.pdfforge.org/blog/pdfcreator-231-released

+ Cisco Firepower System Software Static Credential Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-fp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1394

+ Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-cpcpauthbypass
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1416

+ Cisco Prime Infrastructure and Evolved Programmable Network Manager Authentication Bypass API Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-piauthbypass
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1289

+ Cisco Prime Infrastructure and Evolved Programmable Network Manager Authenticated Remote Code Execution Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-pi-epnm
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1408

+ SA70949 Linux Kernel "tipc_nl_compat_link_dump()" Information Disclosure Vulnerability
https://secunia.com/advisories/70949/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5243

+ SA71371 LibreOffice STL Iterator Use-After-Free Vulnerability
https://secunia.com/advisories/71371/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4324

+ SA71340 Symantec Multiple Products Decomposer Engine Multiple Vulnerabilities
https://secunia.com/advisories/71340/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2207
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2209
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2210
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2211
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3644
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3646

+ SA71321 Linux Kernel "key_reject_and_link()" Vulnerability
https://secunia.com/advisories/71321/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4470

+ UPDATE: JVNVU#97236594 glibc にバッファオーバーフローの脆弱性
http://jvn.jp/vu/JVNVU97236594/index.html

JVNDB-2016-000122 スマートフォンアプリ「スシロー」における SSL サーバ証明書の検証不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000122.html

チェックしておきたい脆弱性情報＜2016.6.30＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/062000119/?ST=security

品川区がWebアクセス用にVDIの統合システムを導入、NECが発表
http://itpro.nikkeibp.co.jp/atcl/news/16/062901915/?ST=security

「日本が強ければルール変更」はもう終わりに、多摩大がルール形成戦略研究所
http://itpro.nikkeibp.co.jp/atcl/news/16/062901912/?ST=security