7日 火曜日、先勝

+ RHSA-2016:1204 Important: spice-server security update
https://rhn.redhat.com/errata/RHSA-2016-1204.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0749
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2150

+ RHSA-2016:1205 Important: spice security update
https://rhn.redhat.com/errata/RHSA-2016-1205.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0749
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2150

+ Google Chrome 51.0.2704.84 released
http://googlechromereleases.blogspot.jp/2016/06/stable-channel-update_6.html

+ UPDATE: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: June 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd

+ UPDATE: Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6

+ Cisco Aironet Access Points Command-Line Interpreter Linux Shell Command Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160606-aap
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1418

+ SA70961 Juniper Junos OS IPv6 Neighbor Discovery Denial of Service Vulnerability
https://secunia.com/advisories/70961/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1409

+ UPDATE: JVNVU#94410990 NTP.org の ntpd にサービス運用妨害 (DoS) など複数の脆弱性
http://jvn.jp/vu/JVNVU94410990/

+ ntp Multiple Bugs Let Remote Users Modify Parameters and Deny Service
http://www.securitytracker.com/id/1036037
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4953
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4954
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4955
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4956
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4957

実践、セキュリティ事故対応
［第10回］自社Webサイトが攻撃を受けたら… 　対策製品を過信せずにログを分析
http://itpro.nikkeibp.co.jp/atcl/column/15/110900259/031800010/?ST=security

趙 章恩「Korea on the Web」
データを人質にする事件多発、韓国警察がサイバーテロ型犯罪取り締まり強化
http://itpro.nikkeibp.co.jp/atcl/column/14/549762/060300092/?ST=security

日立システムズ、金融機関のWebサイトを攻撃から守る統合サービスを販売
http://itpro.nikkeibp.co.jp/atcl/news/16/060601637/?ST=security

UPDATE: JVN#69278491 サイボウズ Office におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN69278491/