OpenSSLã®è„†å¼±æ€§CVE-2016-800(DROWN)ã‚„CVE-2016-0702(CacheBleed)ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog2016å¹´3月1æ—¥(ç¾åœ°æ™‚é–“)ã€OpenSSL プãƒã‚¸ã‚§ã‚¯ãƒˆã¯è„†å¼±æ€§ã®æ„›ç§°ã€ŒDROWNã€ã‚„「CacheBleedã€ã‚’å«ã‚€8件ã®è„†å¼±æ€§æƒ…å ±ã‚’å…¬é–‹ã—ã€ã“れら影響をå—ã‘ã‚‹ã‚‚ã®ã®ä¿®æ£ã‚’è¡Œã£ãŸæœ€æ–°ç‰ˆã‚’リリースã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è„†å¼±æ€§æƒ…å ±æ¦‚è¦ æ³¨æ„å–šèµ· OpenSSL ã®è¤‡æ•°ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· - JPCERT/CC SSLv2 DROWN Attack - US-CERT OpenSSL Projectã®å…¬é–‹æƒ…å ± Forthcoming OpenSSL releases OpenSSL Security Advisory ï¼»1st March 2016ï¼½ OpenSSL version 1.0.1s published OpenSSL version 1.0.2g published An OpenSSL User’s Guide to DROWN 2016å¹´3月1日公
OpenSSLã®è„†å¼±æ€§CVE-2015-1793ã«ã¤ã„㦠- ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
OpenSSLã«é‡åº¦ã®è„†å¼±æ€§ç™ºè¦‹ã®æ¨¡æ§˜ã€ã›ã£ã‹ãã®æ©Ÿä¼šãªã®ã§cloudpack-CSIRTã®æ´»å‹•ã‚’紹介... - ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
OpenSSLã«ã¾ãŸé‡åº¦ã®æ¬ 陥ã€ä¿®æ£ã‚¢ãƒƒãƒ—デートã¯3月19æ—¥ã«ãƒªãƒªãƒ¼ã‚¹
OpenSSLã®è„†å¼±æ€§ï¼ˆCVE-2014-0224）ã¸ã®å¯¾å¿œæ–¹æ³•ï¼ˆAWSサービス/OSã”ã¨ï¼‰ ※éšæ™‚æ›´æ–°ä¸ - サーãƒãƒ¼ãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°
OpenSSL マジヤãƒã„ã£ã™ï¼ ～ Heartbleed 脆弱性を試ã—ã¦ã¿ãŸã‚ˆ - モラトリアムã“ã˜ã‚‰ã›ãŸ
Wiresharkã§SSL通信ã®ä¸èº«ã‚’覗ã„ã¦ã¿ã‚‹ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ - ã‚ã‚‚ãŠãã°
{{#tags}}- {{label}}
{{/tags}}