4日 月曜日、赤口

+ Mozilla Thunderbird 45.2.0 released
https://www.mozilla.org/en-US/thunderbird/45.2.0/releasenotes/

+ Squid 3.5.20 released
http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.20-RELEASENOTES.html

+ UPDATE: Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6

+ SA71439 Meinberg NTP Multiple Vulnerabilities
https://secunia.com/advisories/71439/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4953
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4954
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4955
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4956
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4957

+ Dovecot 2.2.25 released
http://www.dovecot.org/list/dovecot-news/2016-July/000324.html

+ Ubuntu 16.04 local root exploit - netfilter target_offset OOB
https://cxsecurity.com/issue/WLB-2016070013

「経営課題という認識が不足」、679万人のJTB情報漏洩可能性が残す教訓
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/062900564/?ST=security

UPDATE: JVN#89379547 Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN89379547/index.html

JVNVU#95113461 ManageEngine Password Manager Pro にクロスサイトリクエストフォージェリの脆弱性
http://jvn.jp/vu/JVNVU95113461/index.html