24日 月曜日、友引

+ CESA-2013:0620-01 Important Xen4CentOS kernel Upate
http://lwn.net/Alerts/555846/

+ CESA-2013:0964 Moderate CentOS 6 tomcat6 Update
http://lwn.net/Alerts/555845/

+ BIND 9.9.3-P1, 9.8.5-P1, 9.6-ESV-R9-P1 released
https://www.isc.org/downloads/software-support-policy/bind-software-status/

+ HS13-015 Multiple Vulnerabilities in Cosminexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-015/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1500
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2437
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2442
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2443
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2445
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2446
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2448
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2450
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2451
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2454
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2455
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2456
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2459
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2461
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2466
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2471
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2472
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2473
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3743

+ HS13-015 Cosminexusにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS13-015/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1500
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2437
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2442
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2443
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2445
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2446
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2448
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2450
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2451
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2454
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2455
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2456
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2459
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2461
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2466
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2471
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2472
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2473
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3743

+ Postfix 2.9.7, 2.8.15, 2.7.1 released
http://mirror.postfix.jp/postfix-release/official/postfix-2.9.7.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.8.15.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.7.14.HISTORY

+ Cisco WebEx Social Flaw Permits Cross-Site Request Forgery Attacks
http://www.securitytracker.com/id/1028695
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3392

+ Google Chrome Flash Plug-in Lets Remote Users Conduct Clickjacking Attacks
http://www.securitytracker.com/id/1028694
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2866

+ LOCAL: FreeBSD 9.0-9.1 mmap/ptrace Privilege Esclation Exploit
FreeBSD 9.0-9.1 mmap/ptrace Privilege Esclation Exploit

+ Linux Kernel 'tcp_collapse()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/60214
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2128

「Webブロックリスト」のフォーマットの変更について
http://www.trendmicro.co.jp/support/news.asp?id=1977

FBI、「無人機で米国内を監視」認める（WIRED.jp）
http://itpro.nikkeibp.co.jp/article/NEWS/20130624/487041/?ST=security

機密情報を狙う「獅子身中の虫」　内部不正対策は万全か
第1回：「うちの会社は大丈夫」、思い込みで後手に回る内部不正対策
http://itpro.nikkeibp.co.jp/article/COLUMN/20130619/486167/?ST=security

Webカメラを使った盗撮に注意、「使わないならテープでふさぐ」
ソフトウエアの脆弱性を悪用される、セキュリティ企業が警告
http://itpro.nikkeibp.co.jp/article/NEWS/20130621/486962/?ST=security

5種類のセンサーとスマホで独居高齢者を見守るサービス「いまイルモ」開始
http://itpro.nikkeibp.co.jp/article/NEWS/20130621/486841/?ST=security

仏当局、Googleにプライバシー保護手段の改善を正式要請
http://itpro.nikkeibp.co.jp/article/NEWS/20130621/486766/?ST=security

リークが口火、論議呼ぶ米政府の個人情報収集プログラム
http://itpro.nikkeibp.co.jp/article/COLUMN/20130620/486569/?ST=security

LOCAL: Adrenalin Player 2.2.5.3 (.asx) - SEH Buffer Overflow
http://www.exploit-db.com/exploits/26367