12日 木曜日、友引

ISC BIND 9.11.0-P2, 9.10.4-P5, 9.9.9-P5 released
http://ftp.isc.org/isc/bind9/9.11.0-P2/RELEASE-NOTES-bind-9.11.0-P2.html
http://ftp.isc.org/isc/bind9/9.10.4-P5/RELEASE-NOTES-bind-9.10.4-P5.html
http://ftp.isc.org/isc/bind9/9.9.9-P5/RELEASE-NOTES-bind-9.9.9-P5.html

+ CVE-2016-9131: A malformed response to an ANY query can cause an assertion failure during recursion
https://kb.isc.org/article/AA-01439
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9131

+ CVE-2016-9147: An error handling a query response containing inconsistent DNSSEC information could cause an assertion failure
https://kb.isc.org/article/AA-01440
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9147

+ CVE-2016-9444: An unusually-formed DS record response could cause an assertion failure
https://kb.isc.org/article/AA-01441
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9444

+ CVE-2016-9778: An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c
https://kb.isc.org/article/AA-01442
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9778

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: November 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161114-openssl

+ FreeBSD-SA-17:01.openssh OpenSSH multiple vulnerabilities
https://www.freebsd.org/security/advisories/FreeBSD-SA-17:01.openssh.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010

+ UPDATE: Oracle Solaris Third Party Bulletin - October 2016
http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html

JVNDB-2017-000007 サイボウズ リモートサービスマネージャーにおけるクライアント証明書の検証不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000007.html

NECネッツエスアイ、安全なWebアクセス環境をクラウドサービス化
http://itpro.nikkeibp.co.jp/atcl/news/17/011100052/?ST=security&itp_list_theme

JVNVU#95516811 iOS 用 ThreatMetrix SDK に SSL サーバ証明書の検証不備の脆弱性
http://jvn.jp/vu/JVNVU95516811/