26日 木曜日、先勝

+ RHSA-2015:0266 Important: thunderbird security update
https://rhn.redhat.com/errata/RHSA-2015-0266.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0822
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0827
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0831
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0836

+ CESA-2015:0265 Critical CentOS 7 firefox Security Update
http://lwn.net/Alerts/634760/

+ CESA-2015:0265 Critical CentOS 6 firefox Security Update
http://lwn.net/Alerts/634758/

+ CESA-2015:0265 Critical CentOS 5 firefox Security Update
http://lwn.net/Alerts/634759/

+ BIND 9.10.2, 9.9.7 released
https://kb.isc.org/article/AA-01257/81/BIND-9.10.2-Release-Notes.html
https://kb.isc.org/article/AA-01256/81/BIND-9.9.7-Release-Notes.html

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

+ HPSBST03257 rev.1 - HP Storage Provisioning Manager for HP Matrix Operating Environment running OpenSSL, Disclosure of Information
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04568546&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566

+ HPSBUX03162 SSRT101885 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Other Vulnerabilites
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04556853&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204

+ FreeBSD-SA-15:05.bind BIND remote denial of service vulnerability
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:05.bind.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1349

+ FreeBSD-SA-15:04.igmp Integer overflow in IGMP protocol
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:04.igmp.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1414

+ FreeBSD IGMP Integer Overflow Lets Remote Users Deny Service
http://www.securitytracker.com/id/1031798
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1414

+ SA63113 FreeBSD IGMP Packets Handling Denial of Service Vulnerability
http://secunia.com/advisories/63113/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1414

+ FreeBSD CVE-2015-1414 Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/72777
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1414

JVNDB-2015-000026 シンクグラフィカ製メールフォームプロ CGI において任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000026.html

JVNDB-2015-000027 日本語版 Zen Cart におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000027.html

世界のセキュリティ・ラボから
便利なIoTよりセキュアなIoTを
http://itpro.nikkeibp.co.jp/atcl/column/14/264220/022400033/?ST=security

国内ユーザー10万人を詐欺サイトに誘導、「不正広告」の脅威
http://itpro.nikkeibp.co.jp/atcl/news/15/022500691/?ST=security

F5がネットセキュリティのSaaSを開始、第一弾はDDoS対策
http://itpro.nikkeibp.co.jp/atcl/news/15/022500684/?ST=security

JVN#30135729 シンクグラフィカ製メールフォームプロ CGI において任意のコードを実行される脆弱性
http://jvn.jp/jp/JVN30135729/index.html

JVN#44544694 日本語版 Zen Cart におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN44544694/index.html