18日 木曜日、大安

+ RHSA-2013:0753 Moderate: icedtea-web security update
http://rhn.redhat.com/errata/RHSA-2013-0753.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1926
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1927

+ RHSA-2013:0752 Important: java-1.7.0-openjdk security update
http://rhn.redhat.com/errata/RHSA-2013-0752.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0401
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1488
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1518
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1557
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1558
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2415
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2417
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2420
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2421
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2422
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2423
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2424
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2426
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2429
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2430
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2431
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2436

+ RHSA-2013:0751 Critical: java-1.7.0-openjdk security update
http://rhn.redhat.com/errata/RHSA-2013-0751.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0401
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1488
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1518
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1557
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1558
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2415
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2417
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2420
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2421
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2422
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2423
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2424
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2426
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2429
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2430
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2431
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2436

+ CESA-2013:0747 Moderate CentOS 5 kernel Update
http://lwn.net/Alerts/547522/

+ CESA-2013:0748 Moderate CentOS 6 krb5 Update
http://lwn.net/Alerts/547523/

+ UPDATE: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000

+ Cisco Network Admission Control Manager SQL Injection Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1177

+ Cisco TelePresence Infrastructure Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-tpi
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1176

+ MySQL 5.6.11, 5.5.31, 5.1.69 released
http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-11.html
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-31.html
http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-69.html

+ UltraMonkey(L4) for RHEL4,RHEL5,RHEL6 (x86, x86_64) 3.15 released
http://sourceforge.jp/projects/ultramonkey-l7/releases/58508/note

+ MySQL Multiple Bugs Let Remote Authenticated Users Deny Service and Partially Access and Modify Data
http://www.securitytracker.com/id/1028449
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1502
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1506
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1511
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1512
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1521
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1523
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1526
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1531
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1532
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1544
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1548
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1552
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1566
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1567
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1570
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2375
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2376
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2378
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2381
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2389
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2392
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2395

Oracle Java の脆弱性対策について(CVE-2013-2383等)
http://www.ipa.go.jp/security/ciadr/vul/20130417-jre.html

プレス発表
標的型攻撃の防御に向けた産業界との情報共有の枠組み、J-CSIP（ジェイシップ）の活動レポートを公開
～活動の成果として参加企業から246件の情報提供を受け、うち160件を情報共有～
http://www.ipa.go.jp/about/press/20130417.html

世界のセキュリティ・ラボから
不正リンクを掲載したSkypeメッセージが急増
http://itpro.nikkeibp.co.jp/article/COLUMN/20130414/470781/?ST=security

JR東日本の会員ポータルサイトへ不正ログイン
http://itpro.nikkeibp.co.jp/article/NEWS/20130417/471613/?ST=security

2013年4月 Oracle Java SE のクリティカルパッチアップデート (定例) に関する注意喚起
http://www.jpcert.or.jp/at/2013/at130021.html