29日 水曜日、大安

+ RHSA-2013:0869 Important: tomcat6 security update
http://rhn.redhat.com/errata/RHSA-2013-0869.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2051

+ Opera 15.0 Next released
http://www.opera.com/docs/changelogs/unified/1500n/

+ RHSA-2013:0870 Important: tomcat5 security update
http://rhn.redhat.com/errata/RHSA-2013-0870.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976

+ Windows Kernel 'win32k.sys' Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1028591

+ REMOTE: Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
http://www.exploit-db.com/exploits/25775

+ Facebook HTTP Graph API Users ID (and others) Information Disclosure
http://cxsecurity.com/issue/WLB-2013050198

+ Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
http://cxsecurity.com/issue/WLB-2013050174

+ Apache Tomcat CVE-2013-1976 Insecure Temporary File Handling Vulnerability
http://www.securityfocus.com/bid/60186
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976

Trend Micro Control Manager 5.5 Service Pack 1 Patch 3 build 1850 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1961

チェックしておきたい脆弱性情報＜2013.05.28＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20130527/479681/?ST=security

ファイルの「メタデータ」に重要な情報が潜む――ケビン・ミトニック氏
企業のソフトウエア利用状況やネットワーク情報が丸裸に
http://itpro.nikkeibp.co.jp/article/NEWS/20130528/480063/?ST=security

LOCAL: AdobeCollabSync Buffer Overflow Adobe Reader X Sandbox Bypass
http://www.exploit-db.com/exploits/25776