15日 火曜日、先勝

+ RHSA-2016:2702 Important: policycoreutils security update
https://rhn.redhat.com/errata/RHSA-2016-2702.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7545

+ VMware Workstation 12 Player Version 12.5.2 Released
http://pubs.vmware.com/Release_Notes/en/workstation/12player/player-1252-release-notes.html?__utma=207178772.702043549.1440547077.1479081646.1479167860.259&__utmb=207178772.1.10.1479167860&__utmc=207178772&__utmx=-&__utmz=207178772.1440547077.1.1.utmcsr=my.vmware.com|utmccn=(referral)|utmcmd=referral|utmcct=/web/vmware/free&__utmv=-&__utmk=136418099

+ Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: November 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161114-openssl
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055

+ SA73650 Linux Kernel "__sys_recvmmsg()" Use-After-Free Vulnerability
https://secunia.com/advisories/73650/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7117

+ SA73704 VMware Multiple Products DnD Privilege Escalation Vulnerability
https://secunia.com/advisories/73704/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7461

+ VMSA-2016-0019 VMware Workstation and Fusion updates address critical out-of-bounds memory access vulnerability
http://www.vmware.com/security/advisories/VMSA-2016-0019.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7461

+ UPDATE: JVNVU#92930223 OpenSSL に複数の脆弱性
http://jvn.jp/vu/JVNVU92930223/

+ JVNTA#94087669 細工された PDF による情報詐取について
http://jvn.jp/ta/JVNTA94087669/

+ Linux Kernel Crash in tcp_collapse() Lets Local Users Cause Denial of Service Conditions on the Target System
http://www.securitytracker.com/id/1037285
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8645

+ VMware Workstation and Fusion Drag and Drop Memory Access Error Lets Local Users on a Guest System Gain Privileges on the Host System
http://www.securitytracker.com/id/1037282
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7461

Amazon RDS now supports PostgreSQL 9.6.1
https://www.postgresql.org/about/news/1717/

UPDATE: JVNVU#95749024 MatrixSSL に複数の脆弱性
http://jvn.jp/vu/JVNVU95749024/index.html