25日 月曜日、大安

+ UPDATE: Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150320-openssl

+ UPDATE: GNU glibc gethostbyname Function Buffer Overflow Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost

+ HPSBMU03336 rev.1- HP Helion OpenStack affected by VENOM, Denial of Service (DoS), Execution of Arbitrary Code
https://h20565.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04685037&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456

+ Linux kernel 2.6.32.66 released
https://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.66

+ Citrix Security Advisory for DHE_EXPORT TLS Vulnerability CVE-2015-4000
http://support.citrix.com/article/CTX201114
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000

+ PostgreSQL 9.4.2, 9.3.7, 9.2.11, 9.1.16, 9.0.20 released!
http://www.postgresql.org/about/news/1587/
http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
http://www.postgresql.org/docs/9.3/static/release-9-3-7.html
http://www.postgresql.org/docs/9.2/static/release-9-2-11.html
http://www.postgresql.org/docs/9.1/static/release-9-1-16.html
http://www.postgresql.org/docs/9.0/static/release-9-0-20.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3165
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3166
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3167

+ SA64626 McAfee Advanced Threat Defense (ATD) QEMU "fdctrl_write_data()" Buffer Overflow Vulnerability
http://secunia.com/advisories/64626/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456

JVNDB-2015-000068 SXF 共通ライブラリにおけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000068.html

UPDATE: JVN#78689801 BGA32.DLL および QBga32.DLL における複数の脆弱性
http://jvn.jp/jp/JVN78689801/

UPDATE: JVN#53579095 FileMaker Pro におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN53579095/

Webセッション分析で攻撃を検知、RSAが米国銀行の事例紹介
http://itpro.nikkeibp.co.jp/atcl/news/15/052201702/?ST=security