11日 金曜日、先負

+ Google Chrome 54.0.2840.99 released
https://googlechromereleases.blogspot.jp/2016/11/stable-channel-update-for-desktop_9.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5199
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5200
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5201
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5202

+ Linux kernel 4.8.7, 4.4.31, 3.12.67 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.31
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.67

+ OpenSSL 1.1.0c is now available
https://www.openssl.org/

+ OpenSSL Security Advisory [10 Nov 2016]
https://www.openssl.org/news/secadv/20161110.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055

+ SA73637 Linux Kernel KVM "x86_decode_insn()" NULL Pointer Dereference Vulnerability
https://secunia.com/advisories/73637/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8630

+ Apache Tomcat 8.5.8 Released
http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.8_(markt)

+ PHP 7.0.13, 5.6.28 Released
http://www.php.net/ChangeLog-7.php#7.0.13
http://www.php.net/ChangeLog-5.php#5.6.28

+ OpenSSL Multiple Bugs Let Remote Users Cause the Target Application to Crash
http://www.securitytracker.com/id/1037261
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055

+ Microsoft Windows 10-Vista Win32k Elevation of Privilege Vulnerability
https://cxsecurity.com/issue/WLB-2016110089
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7255

+ OpenSSL CVE-2016-7053 NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/94244
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7053

+ OpenSSL CVE-2016-7055 Denial of Service Vulnerability
http://www.securityfocus.com/bid/94242
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055

+ OpenSSL CVE-2016-7054 Denial of Service Vulnerability
http://www.securityfocus.com/bid/94238
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7054

+ Linux Kernel 'crypto/lrw.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/94217
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8970

+ Linux Kernel CVE-2016-8632 Local Heap Overflow Vulnerability
http://www.securityfocus.com/bid/94211
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8632

安心お手軽！PCのセキュリティを高める周辺機器
鍵付きのUSBメモリーで安全にファイルをやり取りしよう
http://itpro.nikkeibp.co.jp/atcl/column/16/110100250/110900005/?ST=security&itp_list_theme

カスペルスキー、小規模オフィス向けウイルス対策の管理画面をクラウド化
http://itpro.nikkeibp.co.jp/atcl/news/16/111003333/?ST=security&itp_list_theme

マカフィーがセキュリティ事件の認知度調査、「ランサムウエアが17位から9位へ」
http://itpro.nikkeibp.co.jp/atcl/news/16/111003330/?ST=security&itp_list_theme

Google、ポリシー違反を繰り返すサイトを「再犯者」に分類
http://itpro.nikkeibp.co.jp/atcl/news/16/111003327/?ST=security&itp_list_theme

ソフトバンク、米ジンペリウムのiOSセキュリティアプリを販売へ
http://itpro.nikkeibp.co.jp/atcl/news/16/111003325/?ST=security&itp_list_theme