29日 月曜日、赤口

+ CESA-2015:1189 Important CentOS 5 kvm Security Update
http://lwn.net/Alerts/649516/

+ UPDATE: Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150320-openssl

+ HPSBGN03351 rev.1 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent running OpenSSL, Remote Disclosure of Information
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04710027&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000

+ HPSBUX03359 rev.1 - HP-UX pppoec, local elevation of privilege
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04718530&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2126

+ GCC 4.9.3 released
https://gcc.gnu.org/gcc-4.9/changes.html

+ Google Chrome Bugs Let Remote Users Bypass Same-Origin Restrictions
http://www.securitytracker.com/id/1032731
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1266
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1267
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1268
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1269

+ Adobe Flash Player Drawing Fill Shader Memory Corruption
http://cxsecurity.com/issue/WLB-2015060171
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3105

「ローカルのファイルはBoxへ」、個人情報流出の早稲田大学が緊急対策
http://itpro.nikkeibp.co.jp/atcl/news/15/062602161/?ST=security

［CD 2015］「“野良IoT”対策と公衆無線LANのセキュリティ対策が課題」、内閣サイバーセキュリティセンターの藤田氏
http://itpro.nikkeibp.co.jp/atcl/news/15/062602151/?ST=security

UPDATE: JVN#81094176 Android OS がオープンリゾルバとして機能してしまう問題
http://jvn.jp/jp/JVN81094176/