2日 火曜日、大安

+ SA71891 Linux Kernel "ioctl_file_dedupe_range()" Double Fetch Vulnerability
https://secunia.com/advisories/71891/

+ OpenSSH 7.3 released
http://www.openssh.com/txt/release-7.3
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8325

+ OpenSSH Bugs Let Remote Users Deny Service and Obtain Potentially Sensitive Timing Information and Let Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1036487
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8325

+ Linux >= 4.5 double fetch leading to heap overflow
https://cxsecurity.com/issue/WLB-2016080002

+ opensshでユーザの存在を確認できる脆弱性(CVE-2016-6210)
http://boscono.hatenablog.com/entry/2016/07/18/134138
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210

VU#603047 Crestron AirMedia AM-100 contains multiple vulnerabilities
https://www.kb.cert.org/vuls/id/603047

VU#974424 Crestron Electronics DM-TXRX-100-STR web interface contains multiple vulnerabilities
https://www.kb.cert.org/vuls/id/974424

JVNVU#93087310 Intel Crosswalk Project に SSL サーバ証明書の検証が行われなくなる脆弱性
http://jvn.jp/vu/JVNVU93087310/