\u3010\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u53f2\u4e0a\u6700\u60aa\u306eOpenSSL\u306e\u8106\u5f31\u6027\u3011<\/p>\n
\u30cd\u30c3\u30c8\u306e\u4e16\u754c\u306e\u304a\u3088\u305d\uff13\u5206\u306e\uff12\u3067\u4f7f\u308f\u308c\u3066\u3044\u308b\u3068\u3044\u3046\u30aa\uff0d\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u6697\u53f7\u5316\u901a\u4fe1\u306e\u4ed5\u7d44\u307f
\n\u300c\u30aa\u30fc\u30d7\u30f3\uff33\uff33\uff2c\uff08\u30bb\u30ad\u30e5\u30a2\u30fb\u30bd\u30b1\u30c3\u30c8\u30fb\u30ec\u30a4\u30e4\u30fc\uff09\u300d\u3092\u821e\u53f0\u306b\u3057\u305f\u30d0\u30b0\u9a12\u52d5\u3002<\/p>\n
\uff33\uff33\uff2c\u306f\u3001\u305d\u3082\u305d\u3082\u4eca\u306f\u306a\u304d\u30cd\u30c3\u30c8\u30b9\u30b1\u30fc\u30d7\u304c\uff11\uff19\uff19\uff14\u5e74\u306b\u767a\u8868\u3057\u305f\u6280\u8853\u3002
\n\u30aa\u30fc\u30d7\u30f3\uff33\uff33\uff2c\u306f\u3001\u305d\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306b\u3042\u305f\u308b\u3002
\n<\/p>\n
\u3010\u3069\u306e\u304f\u3089\u3044\u3084\u3070\u3044\u306e\u304b\u3011<\/p>\n
\u58ca\u6ec5\u7684\uff08\u30ab\u30bf\u30b9\u30c8\u30ed\u30d5\u30a3\u30c3\u30af\uff09\u3068\u3044\u3046\u306e\u306f\u9069\u5207\u306a\u8868\u73fe\u3060\u3002\uff11\uff10\u6bb5\u968e\u3067\u8868\u73fe\u3059\u308c\u3070\u3001\u3053\u308c\u306f\uff11\uff11\u3060\u3002
\n\u81ea\u3089\u306e\u30d6\u30ed\u30b0\u3067\u305d\u3046\u8ff0\u3079\u305f\u306e\u306f\u3001\u8457\u540d\u306a\u30cd\u30c3\u30c8\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c02\u9580\u5bb6\u3001\u30d6\u30eb\u30fc\u30b9\u30fb\u30b7\u30e5\u30ca\u30a4\u30a2\u30fc\u3055\u3093\u3060\u3002 <\/p>\n
\u3067\u3001\u3053\u306e\u30d0\u30b0\u9a12\u52d5\u306f\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9\uff08\u5fc3\u81d3\u51fa\u8840\uff09\u3068\u547c\u3070\u308c\u3066\u3044\u308b\u3002<\/p>\n
\u3010\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9\uff08\u82f1\u8a9e: Heartbleed\uff09\u3068\u306f\u3011<\/p>\n
\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9\uff08\u82f1\u8a9e: Heartbleed\uff09\u3068\u306f\u30012014\u5e744\u6708\u306b\u767a\u899a\u3057\u305f\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u6697\u53f7\u5316\u30e9\u30a4\u30d6\u30e9\u30ea\u300cOpenSSL\u300d\u306e\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30fb\u30d0\u30b0\u306e\u3053\u3068\u3002
\n\u8a8d\u8a3c\u5c40\u304b\u3089\u8a8d\u5b9a\u3092\u53d7\u3051\u305f\u300c\u5b89\u5168\u306a\u300d\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30fbWeb\u30b5\u30fc\u30d0\u306e\u7d0417\uff05\uff08\u7d0450\u4e07\u53f0\uff09\u306b\u306f\u76d7\u96e3\u653b\u6483\u306b\u5bfe\u3059\u308b\u8106\u5f31\u6027\uff08\u5f31\u70b9\uff09\u304c\u3042\u308a\u3001
\n\u30b5\u30fc\u30d0\u30fc\u306e\u79d8\u5bc6\u9375\u3084\u5229\u7528\u8005\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u30fb\u30af\u30c3\u30ad\u30fc\u3084\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u76d7\u307f\u51fa\u3059\u3053\u3068\u304c\u51fa\u6765\u308b\u72b6\u614b\u306b\u3042\u3063\u305f\u3002<\/p>\n
\u3053\u306e\u30d0\u30b0\u306fTransport Layer Security\uff08TLS\uff09\u306e\u30cf\u30fc\u30c8\u30d3\u30fc\u30c8(Heartbeet)\u62e1\u5f35\u30d7\u30ed\u30b0\u30e9\u30e0\u306e\u30b5\u30fc\u30d0\u30fc\u30e1\u30e2\u30ea\u64cd\u4f5c\u306e\u30a8\u30e9\u30fc\u51e6\u7406\u306b\u3042\u3063\u305f\u3002
\n\u3053\u306e\u30d0\u30b0\u306f\u751f\u5b58\u78ba\u8a8d\u4fe1\u53f7\u306e\u767a\u4fe1\u6bce\u306b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30e1\u30e2\u30ea\u30fc\u309264\u30ad\u30ed\u30d0\u30a4\u30c8\u305a\u3064\u9732\u51fa\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u305f\u3002
\n\u3053\u306e\u30d0\u30b0\u3092\u60aa\u7528\u3057\u305f\u653b\u6483\u3092\u4f55\u5ea6\u3082\u7e70\u308a\u8fd4\u3059\u3053\u3068\u3067\u3001\uff16\uff14\u30ad\u30ed\u30d0\u30a4\u30c8\u5358\u4f4d\u306e\u30c7\u30fc\u30bf\u3092\u30b5\u30fc\u30d0\u30fc\u304b\u3089\u7d99\u7d9a\u7684\u306b\u76d7\u307f\u51fa\u3059\u3053\u3068\u304c\u3067\u304d\u308b\u308f\u3051\u3060\u3002<\/p>\n
2014\u5e744\u6708\u3001Google\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u30c1\u30fc\u30e0\u306e\u30cb\u30fc\u30eb\u30fb\u30e1\u30fc\u30bf\u304c2012\u5e743\u670814\u65e5\u4ee5\u964d\u306eOpenSSL 1.0.1\u30b7\u30ea\u30fc\u30ba\u306e\u5168\u3066\u306e\u7248\u306b\u30d0\u30b0\uff08\u4e0d\u5177\u5408\uff09\u304c\u3042\u308b\u3068\u767a\u8868\u3002 \u3010\u305d\u306e\u8a9e\u6e90\u306f\uff1f\u306a\u305c\u5fc3\u81d3\u51fa\u8840\u3068\u547c\u3070\u308c\u308b\u306e\u304b\u3011 \u3010\u8106\u5f31\u6027\u306e\u3042\u308b\u30d0\u30fc\u30b8\u30e7\u30f3\u3011 \u3010\u8ab0\u304b\u304c\u3059\u3067\u306b\u3053\u306e\u30d0\u30b0\u306b\u6c17\u3065\u3044\u3066\u60aa\u7528\u3057\u3066\u3044\u305f\u306e\u3067\u306f\u306a\u3044\u304b\u3011<\/p>\n \u30b9\u30ce\u30fc\u30c7\u30f3\u4e8b\u4ef6\u3067\u305d\u306e\u56fd\u969b\u7684\u306a\u30cd\u30c3\u30c8\u76e3\u8996\u6d3b\u52d5\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u7c73\u56fd\u5bb6\u5b89\u5168\u4fdd\u969c\u5c40\uff08\uff2e\uff33\uff21\uff09\u306f\u65e2\u306b\u77e5\u3063\u3066\u3044\u305f\u3068\u306e\u3053\u3068\u3002 \u3010\u8aad\u307f\u51fa\u305b\u308b\u60c5\u5831\u3011<\/p>\n \u30b5\u30fc\u30d0\u30fc\u306e\u30e1\u30e2\u30ea\u30fc\u304b\u3089\u8aad\u307f\u51fa\u305b\u308b\u60c5\u5831\u306b\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u306e\uff29\uff24\u3084\u30d1\u30b9\u30ef\u30fc\u30c9\u3068\u3044\u3063\u305f\u5927\u4e8b\u306a\u60c5\u5831\u3001 \u30aa\u30fc\u30d7\u30f3\uff33\uff33\uff2c\u3067\u4f7f\u308f\u308c\u3066\u3044\u308b\u6697\u53f7\u6280\u8853\u306f\u300c\u516c\u958b\u9375\u6697\u53f7\u300d\u3068\u547c\u3070\u308c\u308b\u3082\u306e\u3060\u3002<\/p>\n \u3053\u308c\u306f\u3001\u300c\u516c\u958b\u9375\u300d\u3068\u300c\u79d8\u5bc6\u9375\u300d\u3068\u3044\u3046\uff11\u30bb\u30c3\u30c8\u306e\u6697\u53f7\u9375\u3092\u4f7f\u3046\u4ed5\u7d44\u307f\u3060\u3002 \u300c\u79d8\u5bc6\u9375\u300d\u304c\u76d7\u307e\u308c\u3066\u3057\u307e\u3048\u3070\u3001\u6697\u53f7\u901a\u4fe1\u306e\u4e2d\u8eab\u304c\u4e38\u3054\u3068\u89e3\u8aad\u3055\u308c\u3066\u3057\u307e\u3063\u305f\u308a\u3001 \u3010\u30e6\u30fc\u30b6\u30fc\u306b\u3067\u304d\u308b\u3053\u3068\u3011<\/p>\n \u30d0\u30b0\u306e\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b5\u30a4\u30c8\u304c\u300c\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9\u300d\u306b\u5bfe\u5fdc\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u306e\u4e0a\u3067\u3001 \u3010\u53c2\u8003\u30b5\u30a4\u30c8\u3011 OpenSSL \u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 \u66f4\u65b0\uff1aOpenSSL \u306e\u8106\u5f31\u6027\u5bfe\u7b56\u306b\u3064\u3044\u3066(CVE-2014-0160)\uff1aIPA \u72ec\u7acb\u884c\u653f\u6cd5\u4eba \u60c5\u5831\u51e6\u7406\u63a8\u9032\u6a5f\u69cb IIJ Security Diary Heartbleed bug \u306b\u3088\u308b\u79d8\u5bc6\u9375\u6f0f\u6d29\u306e\u73fe\u5b9f\u6027\u306b\u3064\u3044\u3066 \u9375\u7a74\u4ee5\u5916\u306b\u7a74\u304c\u3042\u3063\u305f\u304b\u3089\u3001\u305d\u3053\u304b\u3089\u3001\u4e2d\u304c\u8997\u3051\u3061\u3083\u3063\u305f\u3067\u3054\u3056\u308b\u306e\u4ef6\u3002 \u3010\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u53f2\u4e0a\u6700\u60aa\u306eOpenSSL\u306e\u8106\u5f31\u6027\u3011 \u30cd\u30c3\u30c8\u306e\u4e16\u754c\u306e\u304a\u3088\u305d\uff13\u5206\u306e\uff12\u3067\u4f7f\u308f\u308c\u3066\u3044\u308b\u3068\u3044\u3046\u30aa\uff0d\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u6697\u53f7\u5316\u901a\u4fe1\u306e\u4ed5\u7d44\u307f \u300c\u30aa\u30fc\u30d7\u30f3\uff33\uff33\uff2c\uff08\u30bb\u30ad\u30e5\u30a2\u30fb\u30bd\u30b1\u30c3\u30c8\u30fb\u30ec\u30a4\u30e4\u30fc\uff09\u300d\u3092\u821e\u53f0\u306b\u3057\u305f\u30d0\u30b0\u9a12\u52d5\u3002 \uff33\uff33\uff2c\u306f\u3001 […]<\/p>\n","protected":false},"author":2,"featured_media":23809,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"status","meta":{"footnotes":""},"categories":[4],"tags":[208],"class_list":["post-11664","post","type-post","status-publish","format-status","has-post-thumbnail","hentry","category-diary","tag-security","post_format-post-format-status"],"_links":{"self":[{"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/posts\/11664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/comments?post=11664"}],"version-history":[{"count":0,"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/posts\/11664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/media\/23809"}],"wp:attachment":[{"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/media?parent=11664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/categories?post=11664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/arison.jp\/blog\/wp-json\/wp\/v2\/tags?post=11664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nHeartbleed.com<\/a>\u30c9\u30e1\u30a4\u30f3\u3092\u7acb\u3061\u4e0a\u3052\u3066\u30d0\u30b0\u306e\u8aac\u660e\u3092\u516c\u958b\u3057\u305f\u306e\u306f\u3001\u30d5\u30a3\u30f3\u30e9\u30f3\u30c9\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f1a\u793e\u30b3\u30fc\u30c7\u30ce\u30df\u30b3\u30f3\u306e1\u4eba\u306e\u6280\u8853\u8005\u3002<\/p>\n
\nHeartbeet \u306e\u30d0\u30b0\u3067\u3001\u5c11\u3057\u305a\u3064\u60c5\u5831\u304c\u76d7\u307e\u308c\u3066\u3044\u304f\u3053\u3068\u304b\u3089\u3001Heartbleed\u3068\u547c\u3070\u308c\u308b\u3053\u3068\u306b\u306a\u3063\u305f\u3002
\n\uff08Heartbeet\u3092\u3082\u3058\u3063\u3066Heartbleed\u3068\u547c\u3070\u308c\u308b\u3053\u3068\u306b\u306a\u3063\u305f\u3089\u3057\u3044\u3002\uff09<\/p>\n
\n\u3000OpenSSL 1.0.1 \u304b\u3089 1.0.1f
\n\u3000OpenSSL 1.0.2-beta \u304b\u3089 1.0.2-beta1<\/p>\n
\n\uff2e\uff33\uff21\u306f\u30cd\u30c3\u30c8\u76e3\u8996\u306e\u5c02\u9580\u5bb6\u96c6\u56e3\u3068\u3057\u3066\u6709\u540d\u3067\u3059\u3002<\/p>\n
\n\u3055\u3089\u306b\u306f\u6697\u53f7\u901a\u4fe1\u3092\u89e3\u8aad\u3059\u308b\u305f\u3081\u306e\u300c\u9375\u300d\u307e\u3067\u542b\u307e\u308c\u3066\u3044\u308b\u3068\u3044\u3046\u3002
\n\u3053\u306e\u300c\u9375\u300d\u306e\u60c5\u5831\u306f\u7279\u306b\u6050\u308d\u3057\u3044\u3002<\/p>\n
\n\u300c\u516c\u958b\u9375\u300d\u306f\u30cd\u30c3\u30c8\u3067\u8a3c\u660e\u66f8\u3068\u3068\u3082\u306b\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u9375\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u3053\u308c\u3092\u4f7f\u3063\u3066\u9001\u4fe1\u30c7\u30fc\u30bf\u3092\u6697\u53f7\u5316\u3059\u308b\u3002
\n\u30da\u30a2\u3068\u306a\u308b\u300c\u79d8\u5bc6\u9375\u300d\u3067\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u3092\u5143\u306e\u72b6\u614b\u306b\u623b\u3059\u3002
\n\u3053\u306e\u300c\u79d8\u5bc6\u9375\u300d\u306f\u3001\u53d7\u4fe1\u3057\u305f\u30b5\u30fc\u30d0\u30fc\u5074\u3060\u3051\u304c\u6301\u3063\u3066\u3044\u308b\u305f\u3081\u3001\u9014\u4e2d\u3067\u30c7\u30fc\u30bf\u304c\u76d7\u8074\u3055\u308c\u3066\u3082\u6697\u53f7\u3092\u89e3\u304f\u3053\u3068\u306f\u3067\u304d\u305a\u3001\u5185\u5bb9\u304c\u6f0f\u308c\u308b\u3053\u3068\u306f\u306a\u3044
\n\u2026\u306f\u305a\u306a\u306e\u3060\u304c\u3001\u300c\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9\u300d\u306e\u60aa\u7528\u306b\u3088\u3063\u3066\u3001\u3053\u306e\u300c\u79d8\u5bc6\u9375\u300d\u304c\u6d41\u51fa\u3057\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/p>\n
\n\u3042\u308b\u3044\u306f\u507d\u30b5\u30a4\u30c8\u3092\u7acb\u3061\u4e0a\u3052\u3089\u308c\u3066\u3057\u307e\u3063\u305f\u308a\u3001\u3068\u6df1\u523b\u306a\u88ab\u5bb3\u304c\u4e88\u60f3\u3055\u308c\u308b\u3002<\/p>\n
\n\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5909\u66f4\u3059\u308b\u3053\u3068\u3050\u3089\u3044\u3002
\n\u305f\u3060\u3057\u3001\u30b5\u30a4\u30c8\u5074\u304c\u5bfe\u5fdc\u3092\u6e08\u307e\u305b\u3066\u3044\u306a\u3044\u3068\u3001\u65b0\u3057\u3044\u30d1\u30b9\u30ef\u30fc\u30c9\u3082\u6d41\u51fa\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002<\/p>\n
\n\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9 – Wikipedia
\nhttp:\/\/ja.wikipedia.org\/wiki\/%E3%83%8F%E3%83%BC%E3%83%88%E3%83%96%E3%83%AA%E3%83%BC%E3%83%89<\/a>
\n\u58ca\u6ec5\u7684\u30d0\u30b0\u300c\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9\u300d\u3092\uff2e\uff33\uff21\u306f\u77e5\u3063\u3066\u3044\u305f\u306e\u304b \u5e73 \u548c\u535a
\nhttp:\/\/www.huffingtonpost.jp\/kazuhiro-taira\/nsa_b_5149377.html<\/a><\/p>\n
\nhttps:\/\/www.jpcert.or.jp\/at\/2014\/at140013.html<\/a><\/p>\n
\nhttps:\/\/www.ipa.go.jp\/security\/ciadr\/vul\/20140408-openssl.html<\/a><\/p>\n
\nhttps:\/\/sect.iij.ad.jp\/d\/2014\/04\/159520.html<\/a><\/p>\n
\n\u201c\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u306b\u8a73\u3057\u304f\u306a\u3044\u4eba\u3078\u3002\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u53f2\u4e0a\u6700\u60aa\u306eOpenSSL\u306e\u8106\u5f31\u6027\u306e\u30cb\u30e5\u30fc\u30b9\u3092\u308f\u304b\u308a\u3084\u3059\u304f\u66f8\u3044\u3066\u307f\u307e\u3057\u305f\u3002\u307b\u3068\u3093\u3069\u3059\u3079\u3066\u306e\u4eba\u306b\u5f71\u97ff\u3057\u307e\u3059\u3002 – \u975e\u5929\u30de\u30b6\u30fc\u201d
\nhttp:\/\/www.b-chan.jp\/entry\/2014\/04\/11\/004412<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"