16日 金曜日、仏滅

+ Wireshark 2.2.3, 2.0.9 released
https://www.wireshark.org/docs/relnotes/wireshark-2.2.3.html
https://www.wireshark.org/docs/relnotes/wireshark-2.0.9.html

+ UPDATE: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd

+ Linux kernel 4.8.15, 4.4.39 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.39

+ SA73977 Linux Kernel netfilter IPv6 Denial of Service Vulnerability
https://secunia.com/advisories/73977/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9755

+ macOS 10.12 XNU UaF due to lack of locking in set_dp_control_port
https://cxsecurity.com/issue/WLB-2016120090
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7644

+ Microsoft Internet Explorer 9 IEFRAME CMarkup..RemovePointerPos Use-After-Free
https://cxsecurity.com/issue/WLB-2016120089
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3143

+ Microsoft Internet Explorer 9 IEFRAME CMarkupPointer::MoveToGap Use-After-Free
https://cxsecurity.com/issue/WLB-2016120088

+ Microsoft Internet Explorer 9 MSHTML CMarkup::ReloadInCompatView Use-After-Free
https://cxsecurity.com/issue/WLB-2016120087

+ Linux Kernel 'arch/x86/kvm/vmx.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/94933
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9588

JVNDB-2016-000246 複数のソニー製ビデオ会議システムにおける認証不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000246.html

IoTウイルスの脅威
DNSサーバーを“水責め”、IoTウイルスの多様な攻撃
http://itpro.nikkeibp.co.jp/atcl/column/16/112900283/112900005/?ST=security&itp_list_theme

情報セキュリティマネジメントSummit レポート
伊藤忠商事がCERTを組織しトップガンを雇うまでになった内幕
http://itpro.nikkeibp.co.jp/atcl/column/16/120800293/121300005/?ST=security&itp_list_theme

記者の眼
「モラル違反は、法律違反より軽い」という勘違い
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/121400742/?ST=security&itp_list_theme

エルテスが不正究明ソフト「VizKey」を提供開始、セブン銀は不正利用口座の調査に活用
http://itpro.nikkeibp.co.jp/atcl/news/16/121503762/?ST=security&itp_list_theme

米Yahoo!、新たに10億人分のデータ流出判明
http://itpro.nikkeibp.co.jp/atcl/news/16/121503750/?ST=security&itp_list_theme

UPDATE: JVNVU#94858949 複数の NETGEAR 製ルータに脆弱性
http://jvn.jp/vu/JVNVU94858949/