20日 火曜日、友引

+ CESA-2016:2946 Critical CentOS 6 firefox Security Update
https://lwn.net/Alerts/709628/

+ CESA-2016:2946 Critical CentOS 5 firefox Security Update
https://lwn.net/Alerts/709627/

+ CESA-2016:2946 Critical CentOS 7 firefox Security Update
https://lwn.net/Alerts/709629/

+ UPDATE: Cisco Expressway Series Software Security Bypass Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-expressway

+ Samba 4.5.3, 4.4.8 and 4.3.13 Security Releases Available for Download
https://www.samba.org/samba/history/samba-4.5.3.html
https://www.samba.org/samba/history/samba-4.4.8.html
https://www.samba.org/samba/history/samba-4.3.13.html

+ SA74327 Samba Multiple Vulnerabilities
https://secunia.com/advisories/74327/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2123
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2126

+ SA74282 Squid Multiple Security Bypass Vulnerabilities
https://secunia.com/advisories/74282/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10002
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10003

+ Apache HTTP Server 2.4.25 Released
http://www.apache.org/dist/httpd/Announcement2.4.html

+ OpenSSH 7.4 released
http://www.openssh.com/txt/release-7.4

+ OpenSSH Multiple Flaws Let Remote Authenticated Users Gain Elevated Privileges and Local Privileged Users Obtain Host Private Keys
http://www.securitytracker.com/id/1037490
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012

記者の眼
「セマネとか意味ない」という誤解はなぜ生まれたか
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/121600744/?ST=security&itp_list_theme

サイバー脅威に対抗する日米英～Borderless Cyber Asia 2016リポート
「国境を越えた情報共有でサイバー攻撃と対峙を」、日米英の政策キーマンが力説
http://itpro.nikkeibp.co.jp/atcl/column/16/121900306/121900001/?ST=security&itp_list_theme