29日 月曜日、先負

+ RHSA-2016:1776 Important: java-1.6.0-openjdk security update
https://rhn.redhat.com/errata/RHSA-2016-1776.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3458
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3500
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3508
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3550
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3606

+ About the security content of iOS 9.3.5
https://support.apple.com/ja-jp/HT207107
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4655
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4656
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4657

+ UPDATE: Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp

+ UPDATE: Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms

+ Linux kernel 3.10.103 released
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.103

+ SA72201 Apple iOS WebKit Memory Corruption Vulnerability
https://secunia.com/advisories/72201/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4657

+ Postfix 3.1 Patchlevel 2, 3.0 Patchlevel 6 released
http://mirror.postfix.jp/postfix-release/official/postfix-3.1.2.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-3.0.6.HISTORY

+ JVNVU#99497792 Apple iOS に複数の脆弱性
http://jvn.jp/vu/JVNVU99497792/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4655
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4656
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4657

+ OpenSSL 3DES Cipher Block Collision Weakness Lets Remote Users Decrypt Data in Certain Cases
http://www.securitytracker.com/id/1036696

+ Apple libc incomplete fix of Security Update for OS X El Capitan 10.11.2
https://cxsecurity.com/issue/WLB-2016080232

+ Apple iOS CVE-2016-4656 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/92652
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4656

+ Apple iOS CVE-2016-4655 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/92651
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4655

+ WebKit CVE-2016-4657 Unspecified Memory Corruption Vulnerability
http://www.securityfocus.com/bid/92653
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4657

+ Apple Mac OS X/watchOS/iOS/tvOS Incomplete Fix Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/92663

VU#305607 Accellion Kiteworks contains multiple vulnerabilities
https://www.kb.cert.org/vuls/id/305607

百社百様、我が社のCSIRT
［明治安田生命］専任者無し、手さぐりでCSIRTを発足
http://itpro.nikkeibp.co.jp/atcl/column/16/080500167/082500006/?ST=security

サイバーインテリジェンスの探し方
サイバーインテリジェンスの情報源はネット、図書館、そして…
http://itpro.nikkeibp.co.jp/atcl/column/16/081200173/082500005/?ST=security