26日 月曜日、友引

+ uninitialized random
https://curl.haxx.se/docs/adv_20161223.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9594

+ printf floating point buffer overflow
https://curl.haxx.se/docs/adv_20161221A.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586

+ Win CE schannel cert wildcard matches too much
https://curl.haxx.se/docs/adv_20161221B.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9952

+ Win CE schannel cert name out of buffer read
https://curl.haxx.se/docs/adv_20161221C.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9953

+ Low: Red Hat Enterprise Linux 5 Three-Month Retirement Notice
https://rhn.redhat.com/errata/RHSA-2016-2997.html

+ Zabbix 3.2.3, 3.0.7 released
http://repo.zabbix.com/zabbix/3.2/rhel/7/x86_64/
http://repo.zabbix.com/zabbix/3.0/rhel/7/x86_64/?C=M;O=D

+ CESA-2016:2973 Important CentOS 6 thunderbird Security Update
https://lwn.net/Alerts/709945/

+ CESA-2016:2973 Important CentOS 7 thunderbird Security Update
https://lwn.net/Alerts/709944/

+ CESA-2016:2972 Moderate CentOS 6 vim Security Update
https://lwn.net/Alerts/709947/

+ CESA-2016:2972 Moderate CentOS 7 vim Security Update
https://lwn.net/Alerts/709946/

+ CESA-2016:2974 Important CentOS 6 gstreamer-plugins-bad-free Security Update
https://lwn.net/Alerts/709942/

+ CESA-2016:2975 Important CentOS 6 gstreamer-plugins-good Security Update
https://lwn.net/Alerts/709943/

+ curl 7.52.1 released
https://curl.haxx.se/changes.html#7_52_1

+ FreeBSD-SA-16:39.ntp: Multiple vulnerabilities of ntp
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:39.ntp.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7426
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7427
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7428
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7431
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7433
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7434
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9310
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9311

+ SA74401 cURL / libcURL Uninitialized Random Vulnerability
https://secunia.com/advisories/74401/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9594

+ SA74321 Linux Kernel KVM nVMX Software Exceptions Denial of Service Vulnerability
https://secunia.com/advisories/74321/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9588

+ UPDATE: JVNVU#99304449 Apache HTTP Web Server 2.4 における複数の脆弱性に対するアップデート
http://jvn.jp/vu/JVNVU99304449/index.html

+ UPDATE: JVNVU#99531229 NTP.org の ntpd に複数の脆弱性
http://jvn.jp/vu/JVNVU99531229/index.html

JVNDB-2016-000249 SKYSEA Client View において任意のコードが実行可能な脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000249.html

JVNDB-2016-000248 H2O における解放済みメモリ使用 (use-after-free) の脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000248.html

JVNDB-2016-000247 BlueZ 付属のユーティリティにおけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000247.html

趙 章恩「Korea on the Web」
こんなところまで？ハッキング被害続出の韓国
http://itpro.nikkeibp.co.jp/atcl/column/14/549762/122100124/?ST=security&itp_list_theme

2016年アクセスランキング発表！
［セキュリティ］「セキュリティ人材」は増えるのか？新しい試験や資格に関心集まる
http://itpro.nikkeibp.co.jp/atcl/column/16/120900296/121500003/?ST=security&itp_list_theme

アバスト、Androidのリソースを大量に消費する20のアプリを発表
http://itpro.nikkeibp.co.jp/atcl/news/16/122203828/?ST=security&itp_list_theme