19日 月曜日、先負

+ squid 3.5.1 released
http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.1-RELEASENOTES.html

+ UPDATE: Multiple Vulnerabilities in ntpd Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd

+ Linux kernel 3.18.3, 3.14.29, 3.10.65 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.3
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.29
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.65

+ Apache Tomcat 8.0.17 Released
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html

+ UPDATE: JVNVU#99732679 Microsoft Secure Channel (Schannel) に任意のコード実行が可能な脆弱性
http://jvn.jp/vu/JVNVU99732679/index.html

+ Windows Kernel CNG.sys Access Control Flaw Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1031550

+ Microsoft Windows NtApphelpCacheControl Improper Authorization Check
http://cxsecurity.com/issue/WLB-2015010094
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0002

+ SA62129 Linux Kernel User Namespaces Security Bypass Vulnerability
http://secunia.com/advisories/62129/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8989

ヤバイメールの処方箋
（1）メールを利用する上で陥りがちな5つの「ヤバイ」
http://itpro.nikkeibp.co.jp/atcl/column/15/011300007/011300001/?ST=security

朝日新聞社でPC17台がウイルス感染、外部サーバー通じ1カ月以上情報が漏洩
http://itpro.nikkeibp.co.jp/atcl/news/15/011700198/?ST=security

日本女子プロゴルフ協会に不正アクセス、選手の写真などが流出
http://itpro.nikkeibp.co.jp/atcl/news/15/011600197/?ST=security

専用容器と宅急便でバックアップ媒体を搬送・保管するサービス
http://itpro.nikkeibp.co.jp/atcl/news/15/011600187/?ST=security

VU#936356 Ceragon FiberAir IP-10 Microwave Bridge contains a hard-coded root password
http://www.kb.cert.org/vuls/id/936356