4日 水曜日、仏滅

+ Linux kernel 3.0.27 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.27

+ Ghostscript 'OutputFile' Parameter Heap Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/52864

RHSA-2012:0451 Important: rpm security update
http://rhn.redhat.com/errata/RHSA-2012-0451.html

About the security content of Java for OS X Lion 2012-001 and Java for Mac OS X 10.6 Update 7
http://support.apple.com/kb/HT5228

HPSBMU02749 SSRT100793 rev.1 - HP Business Availability Center (BAC) Running on Windows, Remote Cross Site Scripting (XSS)
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03242623%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

ウイルスバスター コーポレートエディション 10.6 Critical Patch ビルド 1194 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1758

ServerProtect for Linux 3.0 Service Pack 1 Patch 4 (Build 1355) 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1756

MySQL 5.1.63, 5.5.23 (Not yet released)
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-63.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html

Samba: 日本語マニュアルパッケージ ver 3.4.15-1を公開しました。
http://wiki.samba.gr.jp/mediawiki/index.php?title=%E3%83%A1%E3%82%A4%E3%83%B3%E3%83%9A%E3%83%BC%E3%82%B8

phpPgAdmin 5.0.4 released
http://www.postgresql.org/about/news/1384/

.Net and Mono lightweight ORM ServiceStack.OrmLite supports PostgreSQL
http://www.postgresql.org/about/news/1385/

Navicat Data Modeler 1.0.1 is now available
http://www.postgresql.org/about/news/1383/

PostgreSQL in Google Summer of Code
http://www.postgresql.org/about/news/1382/

JVNVU#232979 Intuit QuickBooks に複数の脆弱性
http://jvn.jp/cert/JVNVU232979/index.html

JVNVU#928795 Netgear FVS318N の初期設定に問題
http://jvn.jp/cert/JVNVU928795/index.html

JVNVU#834723 TP-Link 8840T の初期設定に問題
http://jvn.jp/cert/JVNVU834723/index.html

パターンマッチングを使わないセキュリティソフト、ウェブルートが5月発売
http://itpro.nikkeibp.co.jp/article/NEWS/20120403/388961/?ST=security

Another airline scam! This time from US Airways
http://isc.sans.edu/diary.html?storyid=12883

MacOS Users vulnerable to Blackhole exploit kit
http://isc.sans.edu/diary.html?storyid=12889

RPM Package Manager Header Processing and Signature Validation Bugs Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026882

Invensys Wonderware Products Multiple Vulnerabilities
http://secunia.com/advisories/48603/

Ubuntu update for aptdaemon
http://secunia.com/advisories/48688/

HP Business Availability Center Apache HTTP Server Multiple Vulnerabilities
http://secunia.com/advisories/48617/

Ubuntu update for linux-mvl-dove
http://secunia.com/advisories/48653/

HP-UX DCE Unspecified Denial of Service Vulnerability
http://secunia.com/advisories/48687/

HP-UX update for Java
http://secunia.com/advisories/48692/

HP Onboard Administrator Multiple Vulnerabilities
http://secunia.com/advisories/48699/

Ghostscript "OutputFile" Buffer Overflow Vulnerability
http://secunia.com/advisories/47855/

WordPress Another WordPress Classifieds Plugin Unspecified Image Upload Vulnerability
http://secunia.com/advisories/47335/

FlatnuX CMS "title" Script Insertion Vulnerability
http://secunia.com/advisories/48676/

pcwRunAs Script Encryption Security Issue
http://secunia.com/advisories/48368/

Joomla! Cross-Site Scripting Vulnerability and Information Disclosure Security Issue
http://secunia.com/advisories/48683/

Red Hat update for JBoss Enterprise BRMS Platform
http://secunia.com/advisories/48697/

FlatnuX NEXT CMS Cross-Site Request Forgery and Script Insertion Vulnerabilities
http://secunia.com/advisories/48656/

REMOTE: Sysax ＜= 5.57 Directory Traversal
http://www.exploit-db.com/exploits/18695

LOCAL: BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR
http://www.exploit-db.com/exploits/18693

RPM Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/52865

Oracle Java SE CVE-2012-0499 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52016

Oracle Java SE CVE-2012-0500 Java Runtime Environment Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/52015

Oracle Java SE CVE-2012-0498 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52019

Oracle Java SE CVE-2012-0506 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52014

Oracle Java SE CVE-2012-0503 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52018

Oracle GlassFish Server Hash Collision Denial Of Service Vulnerability
http://www.securityfocus.com/bid/51194

Oracle Java SE CVE-2012-0501 Remote Stack Overflow Vulnerability
http://www.securityfocus.com/bid/52013

Oracle Java SE CVE-2012-0497 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52009

Oracle Java SE CVE-2012-0502 Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/52011

Oracle Java SE CVE-2011-3563 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52012

Oracle Java SE CVE-2012-0505 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52017

Oracle Java SE Remote Java Runtime Environment Denial Of Service Vulnerability
http://www.securityfocus.com/bid/52161

BlazeVideo HDTV Player PLF File Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/33588

Mozilla Firefox/Thunderbird/SeaMonkey Ogg Vorbis Files Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51753

Linux NFS Project 'nfs-utils' Package 'mount.nfs' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47532

PHP 'exif_process_IFD_TAG()' Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50907

PHP Web Form Hash Collision Denial Of Service Vulnerability
http://www.securityfocus.com/bid/51193

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935

OpenSSL Ciphersuite Downgrade Security Weakness
http://www.securityfocus.com/bid/45164

OpenSSL Ciphersuite Modification Allows Disabled Cipher Security Bypass Vulnerability
http://www.securityfocus.com/bid/45254

Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/41963

Apache mod_proxy_ftp Remote Command Injection Vulnerability
http://www.securityfocus.com/bid/36254

Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/36260

Apache HTTP Server Solaris Event Port Pollset Support Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/36596

Mozilla Firefox CVE-2009-3379 Multiple Remote Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/36875

Linux Kernel 'Clone()' Function 'CLONE_IO' Flag Multiple Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/52152

Oracle Java SE CVE-2012-0504 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/52020

Oracle Java SE CVE-2011-3556 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50231

Oracle Java SE CVE-2011-3560 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50236

Joomla! Predictable Password Generation And Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/52750

Oracle Java SE CVE-2011-3557 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50234

Oracle Java SE CVE-2011-3549 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50223

Oracle Java SE CVE-2011-3547 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50243

Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211

Oracle Java SE CVE-2011-3554 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50216

Oracle Java SE CVE-2011-3552 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50248

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

Oracle Java SE CVE-2011-3521 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50215

Oracle Java SE CVE-2011-3545 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50220

Zend Optimizer File Permissions Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/52866

Ghostscript 'OutputFile' Parameter Heap Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/52864

HP Onboard Administrator Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/52862

Wordpress Another WordPress Classifieds Plugin Unspecified Image Upload Vulnerability
http://www.securityfocus.com/bid/52861