16日 金曜日、赤口

+ CESA-2015:0046 Critical CentOS 7 xulrunner Security Update
http://lwn.net/Alerts/629638/

+ CESA-2015:0046 Critical CentOS 7 firefox Security Update
http://lwn.net/Alerts/629639/

+ CESA-2015:0046 Critical CentOS 6 firefox Security Update
http://lwn.net/Alerts/629640/

+ CESA-2015:0046 Critical CentOS 5 firefox Security Update
http://lwn.net/Alerts/629641/

+ CESA-2015:0047 Important CentOS 6 thunderbird Security Update
http://lwn.net/Alerts/629642/

+ CESA-2015:0047 Important CentOS 5 thunderbird Security Update
http://lwn.net/Alerts/629643/

+ phpMyAdmin 4.3.7 released
http://sourceforge.net/p/phpmyadmin/news/2015/01/phpmyadmin-437-is-released/

+ squid 3.4.11 released
http://www.squid-cache.org/Versions/v3/3.4/squid-3.4.11-RELEASENOTES.html

+ UPDATE: Multiple Vulnerabilities in ntpd Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd

+ Oracle Critical Patch Update Pre-Release Announcement - January 2015
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

+ OpenSSL 1.0.1l, 1.0.0q, 0.9.8ze released
http://www.openssl.org/news/openssl-0.9.8-notes.html
http://www.openssl.org/news/openssl-1.0.0-notes.html
http://www.openssl.org/news/openssl-1.0.1-notes.html

+ Linux Kernel SCTP firewalling fails until SCTP module is loaded
http://cxsecurity.com/issue/WLB-2015010082

+ SA62006 Linux Kernel "key_gc_unused_keys()" Race Condition Denial of Service Vulnerability
http://secunia.com/advisories/62006/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9529

+ SA62191 Apple OS X sysmond Privilege Escalation Vulnerability
http://secunia.com/advisories/62191/

記者の眼
2016年に逮捕者続出？企業に迫るマイナンバーの落とし穴
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/011400159/?ST=security

News ＆ Trend
北朝鮮がソニー子会社へのサイバー攻撃に関与疑惑、日本企業が注意すべき点は？
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/011500145/?ST=security

ブロードバンドルーターに「残念なフォーチュンクッキー」脆弱性、情報流出も
http://itpro.nikkeibp.co.jp/atcl/news/15/011500172/?ST=security