21日 水曜日、仏滅

+ Mozilla Firefox 49.0 released
https://www.mozilla.org/en-US/firefox/49.0/releasenotes/

+ MFSA2016-85 Security vulnerabilities fixed in Firefox 49
https://www.mozilla.org/en-US/security/advisories/mfsa2016-85/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2827
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5270
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5271
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5272
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5273
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5276
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5274
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5277
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5275
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5278
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5279
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5280
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5281
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5282
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5283
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5284
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5256
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5257

+ CESA-2016:1847 Important CentOS 7 kernel Security Update
http://lwn.net/Alerts/701240/

+ UPDATE: Multiple Cisco Products Confidential Information Decryption Man-in-the-Middle Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-ci

+ Cisco Unified Communications Manager Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201600208-ucm
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1317

+ UPDATE: IKEv1 Information Disclosure Vulnerability in Multiple Cisco Products
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1

+ Sudo 1.8.18 released
https://www.sudo.ws/stable.html#1.8.18

+ SA72624 Symantec Multiple Products Decomposer Engine RAR Multiple Vulnerabilities
https://secunia.com/advisories/72624/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5309
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5310

+ Apache Tomcat 7.0.72 Released
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html

+ Mozilla Firefox MFSA 2016-85 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/93052
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5256
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2827
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5271
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5273
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5275
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5279
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5282
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5283

+ Mozilla Firefox Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/93049
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5270
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5272
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5276
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5274
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5277
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5278
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5280
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5281
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5284
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5257

JVNDB-2016-000161 Android アプリ「マネーフォワード」における任意の操作が実行可能な脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000161.html

JVNDB-2016-000160 Android アプリ「マネーフォワード」における WebView クラスに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000160.html

記者の眼
「原理主義になるな」、DeNAのセキュリティ部長が大事にしている10のこと
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/090100653/?ST=security?itp_list_theme