10日 木曜日、仏滅

+ CESA-2015:1741 Important CentOS 6 haproxy Security Update
http://lwn.net/Alerts/656952/

+ CESA-2015:1741 Important CentOS 7 haproxy Security Update
http://lwn.net/Alerts/656953/

+ CESA-2015:1742 Moderate CentOS 7 subversion Security Update
http://lwn.net/Alerts/656954/

+ phpMyAdmin 4.3.13.3 released
https://www.phpmyadmin.net/files/4.3.13.3/

+ UPDATE: Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd

+ RSA Via Lifecycle and Governance Input Validation Flaws Let Remote Conduct Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1033520
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4539
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4540

+ PHP 5.6 / 5.5 / 5.4 Session Deserialized Use-After-Free
https://cxsecurity.com/issue/WLB-2015090056

+ PHP 5.6 / 5.5 / 5.4 SplDoublyLinkedList Use-After-Free
https://cxsecurity.com/issue/WLB-2015090054

RSAがSOC運営ソフトを強化、社外持ち出しPCやクラウドも監視可能に
http://itpro.nikkeibp.co.jp/atcl/news/15/090902932/?ST=security

UPDATE: JVNVU#92833570 Seagate および LaCie ワイヤレスストレージ製品に複数の脆弱性
http://jvn.jp/vu/JVNVU92833570/

VU#549807 Impero Education classroom management software vulnerable to remote code execution
http://www.kb.cert.org/vuls/id/549807