22日 金曜日、赤口

+ Google Chrome 52.0.2743.82 released
http://googlechromereleases.blogspot.jp/2016/07/stable-channel-update.html

+ CESA-2016:1458 Critical CentOS 6 java-1.8.0-openjdk Security Update
http://lwn.net/Alerts/695079/

+ CESA-2016:1458 Critical CentOS 7 java-1.8.0-openjdk Security Update
http://lwn.net/Alerts/695078/

+ UPDATE: Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160711-asa

+ Vulnerability in Objective Systems ASN1C Compiler Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160721-asn1c
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5080

+ Linux kernel 3.12.62 released
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.62

+ PHP 7.0.9, 5.6.24, 5.5.38 released
http://www.php.net/ChangeLog-7.php#7.0.9
http://www.php.net/ChangeLog-5.php#5.6.24
http://php.net/ChangeLog-5.php#5.5.38

+ UPDATE: JVNVU#94410990 NTP.org の ntpd にサービス運用妨害 (DoS) など複数の脆弱性
http://jvn.jp/vu/JVNVU94410990/index.html

+ PHP 7.0.8, 5.6.23 and 5.5.37 out-of-bounds write in bzread()
https://cxsecurity.com/issue/WLB-2016070165
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5399

記者の眼
自衛隊と喜多方ラーメンとイオンカードに共通する「手作業」という悪手
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/072000625/?ST=security

JVNVU#99625371 Objective Systems ASN1C で生成したソースコードにバッファオーバーフローの脆弱性
http://jvn.jp/vu/JVNVU99625371/index.html