21日 火曜日、大安

+ Mozilla Firefox 37.0.2 released
https://www.mozilla.org/en-US/firefox/37.0.2/releasenotes/

+ MFSA 2015-45 Memory corruption during failed plugin initialization
https://www.mozilla.org/en-US/security/advisories/mfsa2015-45/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2706

+ phpMyAdmin 4.4.3 released
https://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/4.4.3/phpMyAdmin-4.4.3-notes.html/view

+ HPSBMU03319 rev.1 - HP Systems Insight Manager, Remote Execution of Code
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04636755&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0240

+ Microsoft Windows Unspecified Flaw Lets Local Users Gain Sysytem Privileges
http://www.securitytracker.com/id/1032155
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1701

+ OpenSSL v1.0.2a Advanced Information Security Corporation
http://cxsecurity.com/issue/WLB-2015040120

+ Linux chown() was racy relative to execve()
http://cxsecurity.com/issue/WLB-2015040119

+ Adobe Flash Player copyPixelsToByteArray Integer Overflow
http://cxsecurity.com/issue/WLB-2015040117
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0556

JVNVU#90341582 HP Network Automation に複数の脆弱性
http://jvn.jp/vu/JVNVU90341582/

VU#260780 NetNanny uses a shared private key and root CA
http://www.kb.cert.org/vuls/id/260780