15日 金曜日、大安

+ Mozilla Firefox 38.0.1 released
https://www.mozilla.org/en-US/firefox/38.0.1/releasenotes/

+ CESA-2015:0988 Critical CentOS 5 firefox Security Update
http://lwn.net/Alerts/644458/

+ CESA-2015:0987 Important CentOS 7 kernel Security Update
http://lwn.net/Alerts/644459/

+ CESA-2015:1003 Important CentOS 5 kvm Security Update
http://lwn.net/Alerts/644460/

+ CESA-2015:0999 Important CentOS 7 qemu-kvm Security Update
http://lwn.net/Alerts/644461/

+ CESA-2015:0998 Important CentOS 6 qemu-kvm Security Update
http://lwn.net/Alerts/644462/

+ CESA-2015:1002 Important CentOS 5 xen Security Update
http://lwn.net/Alerts/644463/

+ UPDATE: Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl

+ UPDATE: Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd

+ Wireshark LBMR/WebSocket/WCP/X11/802.11/Android Logcat Dissector Bugs Let Remote Users Deny Service
http://www.securitytracker.com/id/1032332
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3808
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3809
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3810
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3811
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3813
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3814
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3815

+ Apache Tomcat Security Manager Can Be Bypassed By Remote Users in Certain Cases
http://www.securitytracker.com/id/1032330
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7810

+ phpMyAdmin 4.4.6 Man-In-the-Middle to API Github
http://cxsecurity.com/issue/WLB-2015050095
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3903

+ SA64529 PHP Two Memory Corruption Vulnerabilities
http://secunia.com/advisories/64529/

+ SA64568 phpMyAdmin GitHub API SSL Verification Security Issue
http://secunia.com/advisories/64568/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3903

JVNDB-2015-000064 Cacti における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000064.html

チェックしておきたい脆弱性情報＜2015.05.15＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/051000058/?ST=security

林 伸夫のLong and Winding Mac
安全なMac運用は英語じゃなきゃダメ！？ 追い付かない公式ドキュメントの日本語化
http://itpro.nikkeibp.co.jp/atcl/column/15/051100119/051200001/?ST=security

PCI DSS準拠のために必要な作業を洗い出せ、ベライゾンが提言
http://itpro.nikkeibp.co.jp/atcl/news/15/051401593/?ST=security