6日 火曜日、赤口

+ RHSA-2016:2850 Important: thunderbird security update
https://rhn.redhat.com/errata/RHSA-2016-2850.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9079

+ CESA-2016:2843 Critical CentOS 5 firefox Security Update
https://lwn.net/Alerts/708093/

+ CESA-2016:2843 Critical CentOS 6 firefox Security Update
https://lwn.net/Alerts/708094/

+ phpMyAdmin 4.6.5.2 is released
https://www.phpmyadmin.net/news/2016/12/5/phpmyadmin-4652-released/

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl

+ SA74015 Linux Kernel "snd_pcm_period_elapsed()" Use-After-Free Vulnerability
https://secunia.com/advisories/74015/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9794

+ SA74085 Apache HTTP Server Multiple Vulnerabilities
https://secunia.com/advisories/74085/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8740

+ SA74065 Linux Kernel "mpi_powm()" Denial of Service Vulnerability
https://secunia.com/advisories/74065/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8650

+ HTTP/2 CONTINUATION denial of service
http://httpd.apache.org/security/vulnerabilities_24.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8740

+ Apache HTTPD HTTP/2 Header Processing Lets Remote Users Consume Excessive Memory Resources
http://www.securitytracker.com/id/1037388
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8740

+ Apache Struts CVE-2016-8738 Denial of Service Vulnerability
http://www.securityfocus.com/bid/94657
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8738

+ Linux Kernel 'sound/core/pcm_lib.c' Local Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/94654

+ Linux Kernel CVE-2016-9806 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/94653

+ Linux Kernel 'net/core/sock.c' Multiple Local Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/94655
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9793

+ Apache HTTP Server CVE-2016-8740 Denial of Service Vulnerability
http://www.securityfocus.com/bid/94650
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8740

6つのポイントを徹底図解「脆弱性 解体新書」
脆弱性があっても被害を防ぐ「DEP」「ASLR」を巡る攻防
http://itpro.nikkeibp.co.jp/atcl/column/16/112800281/112800006/?ST=security&itp_list_theme

編集長の眼
「セキュリティ人材は引っぱりだこ」は本当か？
http://itpro.nikkeibp.co.jp/atcl/watcher/16/110700001/120200011/?ST=security&itp_list_theme

トレンドマイクロが2万円を切る家庭用IPS、スマート家電へのサイバー攻撃を防ぐ
http://itpro.nikkeibp.co.jp/atcl/news/16/120503626/?ST=security&itp_list_theme

「次世代スパコンはARMコアで実現される」、英ARMが解説
http://itpro.nikkeibp.co.jp/atcl/news/16/120403617/?ST=security&itp_list_theme