12日 火曜日、友引

+ RHSA-2013:0623 Important: tomcat6 security update
http://rhn.redhat.com/errata/RHSA-2013-0623.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3546
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4534
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5885
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5886
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5887

+ RHSA-2013:0628 Moderate: 389-ds-base security and bug fix update
http://rhn.redhat.com/errata/RHSA-2013-0628.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0312

+ RHSA-2013:0627 Important: thunderbird security update
http://rhn.redhat.com/errata/RHSA-2013-0627.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0787

+ RHSA-2013:0621 Important: kernel security update
http://rhn.redhat.com/errata/RHSA-2013-0621.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0268
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0871

+ Apache Ant 1.9.0 Released
http://ant.apache.org/

+ IBM WebSphere DataPower SOA Appliance TLS/DTLS CBC Mode Oracle Padding Lets Remote Users Recover Plaintext
http://www.securitytracker.com/id/1028267
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169

+ SA52560 IBM WebSphere DataPower SOA Appliances CBC Ciphersuite Plaintext Recovery Weakness
http://secunia.com/advisories/52560/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169

+ SA52543 IBM Sterling Connect:Enterprise OpenSSL Multiple Vulnerabilities
http://secunia.com/advisories/52543/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0742
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1633
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4252
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3207
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3210
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4108
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4577
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0027
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0050
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0884
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2131

+ SA52564 Oracle Solaris X.Org xrdb Hostname Command Injection Security Issue
http://secunia.com/advisories/52564/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0465

+ Squid 'strHdrAcptLangGetItem()' Function Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/58316

+ Linux Kernel 'SCTP_GET_ASSOC_STATS()' Stack-Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/58389

+ Linux Kernel CVE-2013-1825 Multiple Local Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/58382
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1825

+ Linux Kernel 'i915 DRM' Driver Integer Overflow Vulnerability
http://www.securityfocus.com/bid/58427
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0913

+ Linux Kernel CVE-2013-0914 Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/58426
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0914

+ CESA-2013:0503 Moderate CentOS 6 389-ds-base Update
http://lwn.net/Alerts/542364/

+ CESA-2013:0526 Low CentOS 6 automake Update
http://lwn.net/Alerts/542366/

+ CESA-2013:0523 Low CentOS 6 ccid Update
http://lwn.net/Alerts/542369/

+ CESA-2013:0504 Low CentOS 6 dhcp Update
http://lwn.net/Alerts/542370/

+ CESA-2013:0277 Moderate CentOS 6 dnsmasq Update
http://lwn.net/Alerts/542371/

+ CESA-2013:0520 Low CentOS 6 dovecot Update
http://lwn.net/Alerts/542372/

+ CESA-2013:0516 Low CentOS 6 evolution Update
http://lwn.net/Alerts/542373/

+ CESA-2013:0515 Moderate CentOS 6 evolution-mapi Update
http://lwn.net/Alerts/542374/

+ CESA-2013:0522 Moderate CentOS 6 gdb Update
http://lwn.net/Alerts/542375/

+ CESA-2013:0500 Low CentOS 6 hplip Update
http://lwn.net/Alerts/542376/

+ CESA-2013:0512 Low CentOS 6 httpd Update
http://lwn.net/Alerts/542377/

+ CESA-2013:0509 Low CentOS 6 ibacm Update
http://lwn.net/Alerts/542378/

+ CESA-2013:0509 Low CentOS 6 ibsim Update
http://lwn.net/Alerts/542379/

+ CESA-2013:0509 Low CentOS 6 ibutils Update
http://lwn.net/Alerts/542380/

+ CESA-2013:0509 Low CentOS 6 infiniband-diags Update
http://lwn.net/Alerts/542381/

+ CESA-2013:0528 Low CentOS 6 ipa Update
http://lwn.net/Alerts/542382/

+ CESA-2013:0496 Important CentOS 6 kernel Update
http://lwn.net/Alerts/542383/

+ CESA-2013:0509 Low CentOS 6 libibmad Update
http://lwn.net/Alerts/542384/

+ CESA-2013:0509 Low CentOS 6 libibumad Update
http://lwn.net/Alerts/542385/

+ CESA-2013:0509 Low CentOS 6 libibverbs Update
http://lwn.net/Alerts/542386/

+ CESA-2013:0509 Low CentOS 6 libmlx4 Update
http://lwn.net/Alerts/542387/

+ CESA-2013:0509 Low CentOS 6 librdmacm Update
http://lwn.net/Alerts/542388/

+ CESA-2013:0276 Moderate CentOS 6 libvirt Update
http://lwn.net/Alerts/542389/

+ CESA-2013:0515 Moderate CentOS 6 openchange Update
http://lwn.net/Alerts/542390/

+ CESA-2013:0509 Low CentOS 6 opensm Update
http://lwn.net/Alerts/542391/

+ CESA-2013:0519 Moderate CentOS 6 openssh Update
http://lwn.net/Alerts/542392/

+ CESA-2013:0521 Moderate CentOS 6 pam Update
http://lwn.net/Alerts/542393/

+ CESA-2013:0525 Moderate CentOS 6 pcsc-lite Update
http://lwn.net/Alerts/542394/

+ CESA-2013:0514 Moderate CentOS 6 php Update
http://lwn.net/Alerts/542395/

+ CESA-2013:0511 Moderate CentOS 6 pki-core Update
http://lwn.net/Alerts/542396/

+ CESA-2013:0509 Low CentOS 6 rdma Update
http://lwn.net/Alerts/542397/

+ CESA-2013:0506 Moderate CentOS 6 samba4 Update
http://lwn.net/Alerts/542398/

+ CESA-2013:0505 Moderate CentOS 6 squid Update
http://lwn.net/Alerts/542399/

+ CESA-2013:0508 Low CentOS 6 sssd Update
http://lwn.net/Alerts/542400/

+ CESA-2013:0517 Low CentOS 6 util-linux-ng Update
http://lwn.net/Alerts/542401/

+ CESA-2013:0499 Low CentOS 6 xinetd Update
http://lwn.net/Alerts/542403/

+ CESA-2013:0502 Low CentOS 6 xorg-x11-apps Update
http://lwn.net/Alerts/542404/

+ CESA-2013:0502 Low CentOS 6 xorg-x11-server-utils Update
http://lwn.net/Alerts/542406/

+ CESA-2013:0502 Low CentOS 6 xorg-x11-utils Update
http://lwn.net/Alerts/542408/

+ CESA-2013:0550 Moderate CentOS 6 bind Update
http://lwn.net/Alerts/542409/

+ CESA-2013:0580 Moderate CentOS 6 cups Update
http://lwn.net/Alerts/542411/

+ CESA-2013:0568 Important CentOS 6 dbus-glib Update
http://lwn.net/Alerts/542412/

+ CESA-2013:0589 Moderate CentOS 6 git Update
http://lwn.net/Alerts/542413/

+ CESA-2013:0588 Moderate CentOS 6 gnutls Update
http://lwn.net/Alerts/542414/

+ CESA-2013:0605 Critical CentOS 6 java-1.6.0-openjdk Update
http://lwn.net/Alerts/542415/

+ CESA-2013:0602 Critical CentOS 6 java-1.7.0-openjdk Update
http://lwn.net/Alerts/542416/

+ CESA-2013:0567 Important CentOS 6 kernel Update
http://lwn.net/Alerts/542417/

+ CESA-2013:0581 Moderate CentOS 6 libxml2 Update
http://lwn.net/Alerts/542418/

+ CESA-2013:0590 Important CentOS 6 nss-pam-ldapd Update
http://lwn.net/Alerts/542419/

+ CESA-2013:0587 Moderate CentOS 6 openssl Update
http://lwn.net/Alerts/542420/

+ CESA-2013:0609 Important CentOS 6 qemu-kvm Update
http://lwn.net/Alerts/542421/

+ CESA-2013:0612 Moderate CentOS 6 ruby Update
http://lwn.net/Alerts/542422/

+ CESA-2013:0614 Critical CentOS 6 xulrunner Update
http://lwn.net/Alerts/542423/

+ CESA-2013:0611 Moderate CentOS 5 ruby Update
http://lwn.net/Alerts/542350/

+ CESA-2013:0608 Important CentOS 5 kvm Update
http://lwn.net/Alerts/542351/

+ CESA-2013:0614 Critical CentOS 5 xulrunner Update
http://lwn.net/Alerts/542354/

InterScan Web Security Virtual Appliance 5.6 Patch 1 (build 1124) リパック版公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1922

携帯機器に感染するウイルス、96％はAndroidを狙う
エフセキュアが報告、「有料SMSを悪用して金銭を奪う」
http://itpro.nikkeibp.co.jp/article/NEWS/20130311/462103/?ST=security

チェックしておきたい脆弱性情報＜2013.03.11＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20130307/461501/?ST=security

最新サイバー攻撃に備える
遠隔操作ウイルスが企業を狙う
http://itpro.nikkeibp.co.jp/article/COLUMN/20130201/453544/?ST=security

JVNVU#92716319 GroundWork Monitor Enterprise に複数の脆弱性
http://jvn.jp/cert/JVNVU92716319/

VU#782451 HP LaserJet Professional printer telnet debug shell vulnerability
http://www.kb.cert.org/vuls/id/782451