6日 火曜日、先勝

+ MantisBT 1.3.1, 1.2.20 Released
https://www.mantisbt.org/issues/changelog_page.php?version=1.3.1
https://www.mantisbt.org/issues/changelog_page.php?version=1.2.20

+ RHSA-2016:1809 Important: thunderbird security update
https://rhn.redhat.com/errata/RHSA-2016-1809.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2836

+ Linux kernel 4.1.32, 3.18.41 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.32
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.41

+ UPDATE: Oracle Solaris Third Party Bulletin - July 2016
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

+ SA72414 Linux Kernel "tcp_check_send_head()" Use-After-Free Vulnerability
https://secunia.com/advisories/72414/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6828

+ SA72411 Linux Kernel "ioctl_send_fib()" Double Fetch Vulnerability
https://secunia.com/advisories/72411/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480

+ libpng 1.6.25 released
http://www.libpng.org/pub/png/src/libpng-1.6.25-README.txt

+ MySQL 5.7.15, 5.6.33, 5.5.52 released
http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html
http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html

+ PHP 7.0.9 __wakeup() in Deserialization
https://cxsecurity.com/issue/WLB-2016090023
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7124

+ PHP 7.0.9 Session Data Injection Vulnerability
https://cxsecurity.com/issue/WLB-2016090022
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7125

記者の眼
世界はランサムウエアに屈するのか
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/090200654/?ST=security

辻伸弘の裏読みセキュリティ事件簿
米軍基地と間違えられた？岩国の病院被害を調査
http://itpro.nikkeibp.co.jp/atcl/column/16/012900025/042000012/?ST=security