22日 水曜日、赤口

+ Google Chrome 44.0.2403.89 released
http://googlechromereleases.blogspot.jp/2015/07/stable-channel-update_21.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1271
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1273
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1274
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1275
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1276
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1279
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1280
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1281
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1282
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1284
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1286
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1287
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1270
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1272
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1277
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1278
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1285
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1288
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1289

+ CESA-2015:1455 Important CentOS 5 thunderbird Security Update
http://lwn.net/Alerts/651839/

+ CESA-2015:1443 Important CentOS 7 bind Security Update
http://lwn.net/Alerts/651838/

+ CESA-2015:1455 Important CentOS 6 thunderbird Security Update
http://lwn.net/Alerts/651840/

+ CESA-2015:1455 Important CentOS 7 thunderbird Security Update
http://lwn.net/Alerts/651841/

+ UPDATE: OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl

+ FreeBSD-SA-15:13.tcp Resource exhaustion due to sessions stuck in LAST_ACK state
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:13.tcp.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5358

+ Postfix 3.0.2, 2.11.6, 2.10.8, 2.9.14 released
http://mirror.postfix.jp/postfix-release/official/postfix-3.0.2.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.11.6.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.10.8.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.9.14.HISTORY

+ Sudo 1.8.14p2 released
http://www.sudo.ws/stable.html#1.8.14p2

Networkキーワード
バッファーオーバーフローとは
http://itpro.nikkeibp.co.jp/atcl/keyword/14/260922/071500032/?ST=security

Microsoft、クラウドセキュリティのイスラエル企業を買収か
http://itpro.nikkeibp.co.jp/atcl/news/15/072102421/?ST=security

JVNVU#91026764 SolarWinds N-able N-central にドメイン管理パスワードを復号するためのパラメータがハードコードされている問題
http://jvn.jp/vu/JVNVU91026764/index.html

JVNVU#91359631 Total Commander 用プラグイン FileInfo にサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU91359631/index.html

UPDATE: JVN#73568461 Windows 版 PHP における OS コマンドインジェクションの脆弱性
http://jvn.jp/jp/JVN73568461/index.html