30日 木曜日、友引

+ RHSA-2015:0895 Important: 389-ds-base security update
https://rhn.redhat.com/errata/RHSA-2015-0895.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1854

+ CESA-2015:0895 Important CentOS 7 389-ds-base Security Update
http://lwn.net/Alerts/642364/

+ Linux kernel 4.0.1, 3.19.6, 3.14.40, 3.10.76 released
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.1
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.40
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.76

+ Google Chrome 42.0.2311.135 released
http://googlechromereleases.blogspot.jp/2015/04/stable-channel-update_28.html

+ Opera 29 released
http://www.opera.com/docs/changelogs/unified/2900/

+ curl and libcurl 7.42.1 released
http://curl.haxx.se/changes.html#7_42_1

+ LibreOffice Buffer Overflow in HWP Filter Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1032206
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1774

+ Apache OpenOffice Buffer Overflow in HWP Filter Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1032205
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1774

+ SonicWALL Input Validation Flaw in 'macIpSpoofView.html' Permits Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1032204
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3447

+ MySQL 5.7.2 SSL/TLS downgrade
http://cxsecurity.com/issue/WLB-2015040206

+ SonicWall SonicOS 7.5.0.12 & 6.x Client Side Cross Site Scripting Vulnerability
http://cxsecurity.com/issue/WLB-2015040198

+ SA64312 Opera Multiple Vulnerabilities
http://secunia.com/advisories/64312/

+ SA64195 Google Chrome Multiple Vulnerabilities
http://secunia.com/advisories/64195/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1243
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1250

VU#534407 Barracuda Web Filter insecurely performs SSL inspection
http://www.kb.cert.org/vuls/id/534407