25日 水曜日、先勝

+ RHSA-2015:0718 Critical: firefox security update
https://rhn.redhat.com/errata/RHSA-2015-0718.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0818

+ nginx 1.7.11 released
http://nginx.org/

+ CESA-2015:0715 Moderate CentOS 6 openssl Security Update
http://lwn.net/Alerts/637695/

+ UPDATE: GNU glibc gethostbyname Function Buffer Overflow Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost

+ UPDATE: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle

+ Linux kernel 3.18.10 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.10

+ REMOTE: Firefox Proxy Prototype Privileged Javascript Injection
http://www.exploit-db.com/exploits/36480/

+ Firefox Proxy Prototype Privileged Javascript Injection
http://cxsecurity.com/issue/WLB-2015030170
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8636

+ Linux Kernel XSAVE / XRSTOR Fault Handling Denial of Service Vulnerability
http://secunia.com/advisories/63542/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2672

+ OpenVPN OpenSSL "ASN1_TYPE_cmp()" Denial of Service Vulnerability
http://secunia.com/advisories/63452/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286

+ Node.js OpenSSL Vulnerabilities
http://secunia.com/advisories/63600/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0207
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0208
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0285
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0290
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0291
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0293
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1787

JVNDB-2015-000042 TERASOLUNA Server Framework for Java(WEB) の Validator に入力値検査回避の脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000042.html

Active Directoryが危ない！標的型攻撃から守れ
第3回　ポイントは「アカウント管理」と「早期検知」
http://itpro.nikkeibp.co.jp/atcl/column/15/031700048/031700003/?ST=security

要件定義・基本設計で役立つ、安全なWebアプリ＆インフラ構築術
第3回　Webアプリの「セッション」に潜む罠
http://itpro.nikkeibp.co.jp/atcl/column/15/021900028/031700005/?ST=security

世界のセキュリティ・ラボから
米管制システムに脆弱性、当局調査が指摘
http://itpro.nikkeibp.co.jp/atcl/column/14/264220/032300037/?ST=security

チェックしておきたい脆弱性情報＜2015.03.25＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/032300046/?ST=security

米グーグルが「Android for Work」で法人市場に本腰、iOSの牙城を崩せるか
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/032300202/?ST=security

［データは語る］国内企業の4割弱が「セキュリティの強化」を経営課題に??アイ・ティ・アール
http://itpro.nikkeibp.co.jp/atcl/news/14/110601779/032400137/?ST=security

REMOTE: Bsplayer 2.68 - HTTP Response Exploit (Universal)
http://www.exploit-db.com/exploits/36477/