26日 金曜日、赤口

+ gawk 4.1.4 released
http://ftp.gnu.org/gnu/gawk/?C=M;O=D

+ UPDATE: Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp

+ UPDATE: Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms

+ OpenSSL 1.1.0 is now available
https://www.openssl.org/

+ UPDATE: JVN#45093481 Apache Struts における複数の脆弱性
http://jvn.jp/jp/JVN45093481/

+ Apple iOS WebKit Flaws Let Remote Users Execute Arbitrary Code and Applications Obtain Kernel Memory Contents and Gain Elevated Privileges
http://www.securitytracker.com/id/1036694
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4655
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4656
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4657

+ OpenBSD SMTP Processing Bug in rfc2822_parser_init() May Let Remote Users Bypass Security Restrictions on the Target System
http://www.securitytracker.com/id/1036691

+ OpenSSL DTLS Replace Protection Sequence Number Processing Errors Let Remote Users Deny Service
http://www.securitytracker.com/id/1036690
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181

+ OpenSSL DTLS Fragment Processing Error Lets Remote Users Consume Excessive Memory Resources
http://www.securitytracker.com/id/1036689
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179

+ OpenSSL Out-of-Bounds Write Error in BN_bn2dec() Lets Remote Users Cause the Target Application to Crash
http://www.securitytracker.com/id/1036688
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182

+ UPDATE: Linux Kernel 'ovl_copy_up_locked()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/92611

+ Linux Kernel Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/92575

JVNDB-2016-000153 LINE PC版（Windows版）におけるダウンロードファイル検証不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000153.html

SSLはもう古い　TLSがおもしろい
暗号と数学はどういう関係があるの？
http://itpro.nikkeibp.co.jp/atcl/column/16/072100153/072100009/?ST=security

防ぎきれない攻撃への切り札「EDR」とは
EDR機能で記録したログを解析すれば侵入経路をたどれる
http://itpro.nikkeibp.co.jp/atcl/column/16/081000170/081100003/?ST=security

百社百様、我が社のCSIRT
［大成建設］迷わずインシデント通報できるよう、組織と規定にメス
http://itpro.nikkeibp.co.jp/atcl/column/16/080500167/081100005/?ST=security

アイ・オー・データ機器、時限消去機能付きセキュリティUSBメモリー
http://itpro.nikkeibp.co.jp/atcl/news/16/082502461/?ST=security