- Subject: [upki-fed:00816] OpenSSL$B$N@H
- Date: Wed, 16 Apr 2014 17:02:44 +0900
- From: $B9qN)>pJs3X8&5f=j!!3XG';vL36I!!LnED(B <xxxxxxxxxxxxxx@xxxxxxxxx>
IdP/SP$B1?MQC4EvpJs8r49(BML$B3F0L(B
$B9qN)>pJs3X8&5f=j(B $B3XG';vL36I(B $B$G$9!#(B
4/8($B2P(B)$B!"(B4/11($B6b(B)$B$K$*EA$($7$F$*$j$^$9(BOpenSSL 1.0.1$B7O(B(1.0.1?1.0.1f)$B$K4X(B
$B$9$k=EBg$J@HpJs$r$*CN$i$;$$$?$7$^$9!#(B
$B:#2s(BOpenSSL$B$N@Hl9g$K%W(B
$B%m%;%9$N%a%b%j>e$N>pJs$rFI$_pJs$,O3$($$$7$F$$$k2DG=@-$,$"$j$^$9!#(B
OpenSSL$B$N%"%C%W%G!<%H!&(BWindows$BMQ(BShibboleth SP$B%Q%C%1!<%8$N%"%C%W%G!<%H$*(B
$B$h$S%5!<%S%9$N:F5/F0$,40N;$7$^$7$?$i!"2<5-$NFbMF$r$48!F$$/$@$5$$!#(B
1) $B1F6A$rpJs$,O3$($$$7$?2DG=@-$,$"(B
$B$j$^$9$N$G!"%5!<%P>ZL@=q$N99?7$r$48!F$$/$@$5$$!#(B
IdP$B!&(BSP$B$N>ZL@=q99?7ZL@=q99?7https://meatwiki.nii.ac.jp/confluence/display/GakuNinShibInstall/IdP+Key+Rollover
$B%a%?%G!<%?5-:\$N>ZL@=q99?7https://meatwiki.nii.ac.jp/confluence/display/GakuNinShibInstall/SP+Key+Rollover
$B%5!<%P>ZL@=q$N99?7$r9T$$$^$7$?$i!"K:$l$:$K5l>ZL@=q$N<:8z$r$*4j$$$$$?(B
$B$7$^$9!#(B
2) $B!J(BIdP$B$N>l9g!K%Q%9%o!<%I>pJs$,O3$($$$7$?2DG=@-$,$"$j$^$9$N$G!"3F5!4X(B
$B$N%]%j%7!<$K4p$E$-!"BP1~$r$48!F$$/$@$5$$!#(B
$BHkL)80$,O3$($$$7$F$$$?>l9g$G!"$+$D2a5n$NDL?.FbMF!J0E9f2=$5$l$?%G!<(B
$B%?!K$,C_@Q$5$l$F$$$?>l9g$K$O$=$N4|4V$N>pJs$b2rFI$5$l$k2DG=@-$,$"$j$^(B
$B$9!#3F%[%9%H$K$*$1$k1F6AHO0O$ND4::$K$O$4N10U$/$@$5$$!#(B
3) $B!J(BSP$B$N>l9g!K%m%0%$%s:Q$_%f!<%6$N%;%C%7%g%s>pJs!J%;%C%7%g%s(BID$BEy$N(B
cookie$B!K!"(BIdP$B$+$iAw=P$5$l$?%f!<%6$NB0@->pJs(B(*)$B$J$I$,O3$($$$7$?2DG=@-(B
$B$,$"$j$^$9$N$G!"3F5!4X$N%]%j%7!<$K4p$E$-!"BP1~$r$48!F$$/$@$5$$!#(B
Shibboleth$BG'>Z0J30$G!"JLES%m!<%+%k$G$NG'>Z$,9T$o$l$k%5%$%H$G$O%m!<%+(B
$B%k$N%Q%9%o!<%I>pJs$bO3$($$$7$F$$$k2DG=@-$,$"$j$^$9!#(B
(*) $B%f!<%6$NB0@->pJs!J%"%5!<%7%g%s!K$O0E9f2=$5$l$k$?$aDL>oEp$_8+$k$3(B
$B$H$O$G$-$^$;$s$,!"(B1)$B$N(BSP$BHkL)80O3$($$$HAH$_9g$o$;$i$l$k$H2rFI$5$l(B
$BF@$^$9!#(B
$B;29M>pJs!'(B
OpenSSL Security Advisory [07 Apr 2014]
$B!J(BOpenSSL$B8x<0$N%;%-%e%j%F%#%"%I%P%$%6%j!K(B
http://www.openssl.org/news/secadv_20140407.txt
Shibboleth Security Advisory [9 April 2014]
$B!J(BShibboleth Consortium$B$N%;%-%e%j%F%#%"%I%P%$%6%j!K(B
https://shibboleth.net/community/advisories/secadv_20140409.txt
Important: openssl security update
$B!J(BRed Hat$B$N%"%C%W%G!<%H%Q%C%1!<%8$N>pJs!K(B
https://rhn.redhat.com/errata/RHSA-2014-0376.html
OpenSSL 1.0.1$B!?(B1.0.2$B7O$K@Hhttp://www.atmarkit.co.jp/ait/articles/1404/08/news134.html
$B%Q%C%AL$E,MQ$N%5!<%P!<$K?<9o$J6<0R$H$J$k(B Heartbleed $B@Hhttp://www.symantec.com/connect/ja/blogs/heartbleed
$B$4ITL@$NE@$,$4$6$$$^$7$?$i$*Ld$$9g$o$;$/$@$5$$!#(B
$B$I$&$>59$7$/$*4j$$?=$7>e$2$^$9!#(B
--
=========================================================
$B!!9qN)>pJs3X8&5f=j(B $B3X=Q4pHW2](B $B3XG';vL36I(B
$B!!(BTEL$B!'(B03-4212-2218$B!!(xxxxxxxxxxxxxxx@xxxxxxxxx
$B!!3XG'(BWeb$B%Z!<%8(B https://www.gakunin.jp/
$B!!?=@A%7%9%F%`(B https://office.gakunin.nii.ac.jp/
=========================================================