19日 水曜日、先負

+ Selenium Standalone Server 3.0.1 released
http://docs.seleniumhq.org/download/

+ Selenium Client & WebDriver 3.0.1 released
https://raw.githubusercontent.com/SeleniumHQ/selenium/master/java/CHANGELOG

+ About the security content of iOS 10.0.3
https://support.apple.com/ja-jp/HT207263

+ Oracle Critical Patch Update Advisory - October 2016
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

+ SA72160 Ghostscript Multiple Vulnerabilities
https://secunia.com/advisories/72160/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7976
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7977
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7978
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7979
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8602

+ S2-042 Possible path traversal in the Convention plugin
http://struts.apache.org/docs/s2-042.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6795

+ S2-043 Using the Config Browser plugin in production
http://struts.apache.org/docs/s2-043.html

+ Apache Struts 2.3.31 released
http://struts.apache.org/docs/version-notes-2331.html

+ Java SE 8u111 and 8u112 Released
http://www.oracle.com/technetwork/java/javase/8u-relnotes-2225394.html

+ PHP Buffer Overflow in php_pcre_replace_impl() Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1037033

+ PHP 5.6.26 and 7.0.11 Use After Free in unserialize()
https://cxsecurity.com/issue/WLB-2016100148

恐怖！IoTマルウエア大量感染
国内外研究機関と連携しIoT機器観測網を拡大、おとりにネットワークカメラも採用
http://itpro.nikkeibp.co.jp/atcl/column/16/101200222/101200003/?ST=security&itp_list_theme

シスコが企業の安全なクラウド利用に向けた三つのセキュリティサービスを発表
http://itpro.nikkeibp.co.jp/atcl/news/16/101803036/?ST=security&itp_list_theme

JVN#63012325 e-Taxソフトのインストーラにおける DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN63012325/index.html

JVNVU#96741452 ASUS RP-AC52 に複数の脆弱性
http://jvn.jp/vu/JVNVU96741452/index.html