1日 月曜日、赤口

+ MySQL 5.6.25, 5.5.44 released
http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html

+ PHP Integer Overflows Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1032433
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4021
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4022

+ PHP Multipart POST Request Processing Flaw Lets Remote Users Deny Service
http://www.securitytracker.com/id/1032432
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4024

+ PHP Functions That Permit Null Characters in Path Values May Let Remote Users Bypass Access Controls
http://www.securitytracker.com/id/1032431
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4025
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4026

+ VU#498348 Blue Coat SSL Visibility Appliance contains multiple vulnerabilities
http://www.kb.cert.org/vuls/id/498348
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2852
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2853
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2854
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2855

+ IBM Lotus Domino 8.5.4 / 8.5.3 Cross Site Scripting
http://cxsecurity.com/issue/WLB-2015050179

+ Linux Kernel 'fs_pin.c' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/74915

株主向けサイトから1万2014件の情報漏洩、内部犯行の疑い
http://itpro.nikkeibp.co.jp/atcl/news/15/053001810/?ST=security

【今週のITpro検定】
被害急増「身代金ウイルス」の特徴は？
http://itpro.nikkeibp.co.jp/atcl/column/14/556302/052700041/?ST=security

ITproまとめ
SQLインジェクション
http://itpro.nikkeibp.co.jp/atcl/column/14/494329/052800101/?ST=security