21日 木曜日、大安

+ RHSA-2016:1458 Critical: java-1.8.0-openjdk security update
https://rhn.redhat.com/errata/RHSA-2016-1458.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3458
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3500
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3508
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3550
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3587
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3598
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3606
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3610

+ Cisco Unified Computing System Performance Manager Input Validation Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160720-ucsperf
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1374

+ Java SE 8u101, 8u102, 7u111, 6u121 released
http://www.oracle.com/technetwork/java/javase/8u101-relnotes-3021761.html
http://www.oracle.com/technetwork/java/javase/8u102-relnotes-3021767.html
http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_111
http://www.oracle.com/technetwork/java/javase/overview-156328.html#R160_121

+ JVNVU#91485132 CGI ウェブサーバがヘッダ Proxy の値を環境変数 HTTP_PROXY に設定する脆弱性
http://jvn.jp/vu/JVNVU91485132/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5385
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5386
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000110

+ Apache HTTP Server 2.4.23 redirect an application's outbound HTTP traffic
https://cxsecurity.com/issue/WLB-2016070163
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387

JVNDB-2016-000126 Vtiger CRM におけるアクセス制限不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000126.html

JVNDB-2016-000125 WordPressプラグイン「Nofollow Links」におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000125.html

JVNVU#99625371 Objective Systems ASN1C で生成したソースコードにバッファオーバーフローの脆弱性
http://jvn.jp/vu/JVNVU99625371/

JVNVU#97432392 Misys FusionCapital Opics Plus に複数の脆弱性
http://jvn.jp/vu/JVNVU97432392/

Twitterの認証済みアカウント、著名人以外でもオンライン申請可能に
http://itpro.nikkeibp.co.jp/atcl/news/16/072002143/?ST=security