Oracle Critical Patch Update - October 2014
Oracle Critical Patch Update Advisory - October 2014 Description A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for informat
è‡ªå •è½ãªæŠ€è¡“者ã®æ—¥è¨˜ : (å°ãƒã‚¿)楕円曲線暗å·ã‚’ãªã‚“ã¨ãªãç†è§£ã—ãŸæ°—ã«ãªã‚‹ã‚ªã‚¹ã‚¹ãƒ¡ã®ãƒªãƒ³ã‚¯4é¸ - livedoor Blog（ブãƒã‚°ï¼‰
ã‚„ã£ã±ã‚Šã€æ¥•å††æ›²ç·šæš—å·(Elliptic Curve Cryptography)ã¯RSAæš—å·ã«æ¯”ã¹ã¦æ ¼æ®µã«ãªã‚“ã ã‹ã‚“ã 難ã—ã„ã¨æ€ã†ã§ã™ã‚ˆã€‚ 自分も勉強ä¸ãªã‚“ã§ã™ãŒã€ãªã‹ãªã‹è‰¯ã„説明ãŒãªãã¦æ‚¶ã€…ã¨ã—ã¦ãŠã‚Šã¾ã™ã€‚ jsrsasignã®å®Ÿè£…やビットコインを知る必è¦ãŒã‚る手å‰ä»•æ–¹ãªã。ãã‚“ãªçŠ¶æ³ã®ä¸ã€ã„ã‚ã„ã‚見ãŸä¸ã§ã€ çµæ§‹ã‚ªã‚¹ã‚¹ãƒ¡ãªãƒªãƒ³ã‚¯ã‚’4ã¤ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ CloudFlare: A (Relatively Easy To Understand) Primer on Elliptic Curve Cryptography
è‡ªå •è½ãªæŠ€è¡“者ã®æ—¥è¨˜ : POODLE攻撃ã«ã¤ã„ã¦æœ¬å½“ã«TLSv1.0ãªã‚‰å®‰å…¨ãªã®ã‹ï¼Ÿ - livedoor Blog（ブãƒã‚°ï¼‰
基本ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆã趣味ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKI・署å・èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ュリティをやã£ã¦ã„ã¾ã™ã€‚旅好ã。テレビ好ãã§èŠ¸èƒ½é€š POODLE攻撃ã¯ã€é‹ç”¨æ³£ã‹ã›ã¨ã„ã†ã‹ã€SSLv3ã®ã‚µãƒãƒ¼ãƒˆã‚’本当ã«åˆ‡ã£ã¡ã‚ƒã£ã¦ã„ã„ã®ã‹ã€ãƒ¬ã‚¬ã‚·ãƒ¼ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã¤ã„ã¦å¯¾å¿œã™ã‚‹ã®ãŒã„ã„ã®ã‹ã€æ‚©ã‚€æ‰€ã§ã™ã‚ˆã。ShellShock騒ãŽã•ãˆã¾ã ã†ã¡ã§ã¯åŽæŸã—ã¦ã„ãªã„ã®ã«ãƒ»ãƒ»ãƒ» POODLE攻撃ã¯ã€ã€ŒSSLv3ã®å•é¡Œã§ã‚ã£ã¦TLSv1.0以上ã§ã¯(パディングã®æ–¹æ³•ãŒé•ã†ã®ã§)影響ãŒç„¡ã„ã€ã¨ã•ã‚Œã¦ã„ã¾ã™ãŒã€nahiã•ã‚“ã‹ã‚‰ã‚³ãƒ¡ãƒ³ãƒˆã‚‚らã£ã¦ã€Œå®Ÿè£…ä¾å˜ã ã‘ã©TLSv1.0ã§ã‚‚å±é™ºãªå®Ÿè£…ãŒã‚ã‚‹ã‚“ã˜ã‚ƒãªã„ã®ï¼Ÿã€ã¨ã„ã†ã“ã¨ã§ã€ãã®äº‹ã‚’書ã„ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ 今回ã®POODLE攻撃ã«ã¤ã„ã¦ã¯ã€ä½•ãŒå•é¡Œã§ã©ã®ã‚ˆã†ã«ã™ã‚Œã°æ”»æ’ƒã§ãã‚‹ã®ã‹ã¨ã„ã†ã€è©³ã—ã„図入りã®ç´ 晴らã—ã判りやã™ã„解説をモãƒã‚²ãƒ¼ã•ã‚“㌠「SSL v3.
ランã‚ング
ランã‚ング
障害
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
{{#tags}}- {{label}}
{{/tags}}