5日 金曜日、先負

+ RHSA-2016:1573 Moderate: squid security update
https://rhn.redhat.com/errata/RHSA-2016-1573.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5408

+ About the security content of iOS 9.3.4
https://support.apple.com/ja-jp/HT207026
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4654

+ CESA-2016:1573 Moderate CentOS 6 squid Security Update
http://lwn.net/Alerts/696386/

+ CESA-2016:1551 Critical CentOS 5 firefox Security Update
http://lwn.net/Alerts/696385/

+ Cisco IOS Software Crafted Network Time Protocol Packets Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160804-wedge
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1478

+ glibc 2.24 released
http://ftp.gnu.org/gnu/glibc/?C=M;O=A

+ JVNDB-2016-000127 Android ブラウザにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000127.html

+ UPDATE: JVNVU#91485132 CGI ウェブサーバがヘッダ Proxy の値を環境変数 HTTP_PROXY に設定する脆弱性
http://jvn.jp/vu/JVNVU91485132/index.html

+ cURL/libcurl TLS Session Resumption Client Certificate Bug Lets Remote Users Bypass Security Restrictions on the Target System
http://www.securitytracker.com/id/1036538
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419

+ cURL/libcurl TLS Connection Reuse Bug Lets Remote Users Bypass Security Restrictions on the Target System
http://www.securitytracker.com/id/1036537
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420

+ libcurl Use-After-Free Connection Flaw May Let Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1036536
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421

VU#877625 Proxy auto-config (PAC) files have access to full HTTPS URLs
https://www.kb.cert.org/vuls/id/877625

VU#856152 NUUO and Netgear Network Video Recorder (NVR) products web interfaces contain multiple vulnerabilities
https://www.kb.cert.org/vuls/id/856152

JVNDB-2016-000133 スマートフォンアプリ「Coordinate Plus」における SSL サーバ証明書の検証不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000133.html

UPDATE: JVN#89379547 Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN89379547/

富士通、個人情報保護業務を支援するコンサルティングサービスをメニュー化して提供
http://itpro.nikkeibp.co.jp/atcl/news/16/080402334/?ST=security