10日 火曜日、友引

+ About the security content of Xcode 6.2
https://support.apple.com/en-us/HT204427
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3522
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3528
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3580
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8108
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9390

+ About Security Update 2015-002
https://support.apple.com/en-us/HT204413
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1065
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1066
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1061
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4496
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1067

+ About the security content of Apple TV 7.1
https://support.apple.com/en-us/HT204426
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1067
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1061
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1062

+ About the security content of iOS 8.2
https://support.apple.com/en-us/HT204423
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1063
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1065
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1061
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1062
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1067
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1064

+ ISC DHCP 4.3.2, 4.2.8 released
https://kb.isc.org/article/AA-01262
https://kb.isc.org/article/AA-01259

+ UPDATE: Row Hammer Privilege Escalation Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150309-rowhammer

+ HPSBGN03277 rev.1 - HP Virtualization Performance Viewer, Remote Execution of Code, Denial of Service (DoS) and Other Vulnerabilities
https://h20565.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04582466&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9293
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9294
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9296

+ HPSBGN03284 rev.1 - HP Operations Manager i Management Pack for SAP, Local Unauthorized Access
https://h20565.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04588084&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2107

+ HPSBMU03278 rev.1 - HP Operations Manager SPI for SAP, Local Unauthorized Access
https://h20565.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04582567&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7887

+ HPSBMU03283 rev.1 - HP Virtual Connect Enterprise Manager SDK running OpenSSL on Windows, Remote Disclosure of Information, Denial of Service (DoS)
https://h20565.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04587108&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139

+ MySQL 5.7.6 released
http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-6.html

+ LOCAL: Rowhammer: Linux Kernel Privilege Escalation PoC
http://www.exploit-db.com/exploits/36310

Acrobatにも対応したファイル暗号化＆二次利用防止ソフト最新版
http://itpro.nikkeibp.co.jp/atcl/news/15/030900843/?ST=security

無料でも攻撃と盗聴から利用者を守る、最強のセキュアWi-Fiへの道
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/030500206/?ST=security

ラドウェア、オンプレ/クラウドのハイブリッド防御を実現するDDoS対策サービスを発表
http://itpro.nikkeibp.co.jp/atcl/news/15/030900836/?ST=security

JVNVU#99125992 SSL/TLS の実装が輸出グレードの RSA 鍵を受け入れる問題 (FREAK 攻撃)
http://jvn.jp/vu/JVNVU99125992/

LOCAL: Rowhammer: NaCl Sandbox Escape PoC
http://www.exploit-db.com/exploits/36311