5日 水曜日、赤口

+ CESA-2013:0896 Moderate CentOS 6 qemu-kvm Update
http://lwn.net/Alerts/552867/

+ CESA-2013:0897 Important CentOS 6 mesa Update
http://lwn.net/Alerts/552868/

+ CESA-2013:0898 Moderate CentOS 5 mesa Update
http://lwn.net/Alerts/552869/

+ Google Chrome 27.0.1453.110 released
http://googlechromereleases.blogspot.jp/2013/06/stable-channel-update.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2854
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2855
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2856
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2859
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2860
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2861
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2862
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2864

+ CVE-2012-5134 Buffer Overflow vulnerability in libxml2
https://blogs.oracle.com/sunsecurity/entry/cve_2012_5134_buffer_overflow
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134

+ Lucky Thirteen vulnerability in Solaris OpenSSL
https://blogs.oracle.com/sunsecurity/entry/lucky_thirteen_vulnerability_in_solaris
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169

+ Multiple vulnerabilities in Apache HTTP server
https://blogs.oracle.com/sunsecurity/entry/multiple_cross_site_scripting_vulnerabilities
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4558

+ CVE-2013-0338 Denial of Service (DoS) vulnerability in libxml2
https://blogs.oracle.com/sunsecurity/entry/cve_2013_0338_denial_of
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0338

+ CVE-2012-5667 Heap Buffer Overflow vulnerability in GNU Grep
https://blogs.oracle.com/sunsecurity/entry/cve_2012_5667_heap_buffer
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5667

+ Zimbra Collaboration Suite Open Source Edition 8.0.4, 7.2.4 released
http://files.zimbra.com/website/docs/8.0/Zimbra_OS_Release_Notes_8.0.4.pdf
http://files.zimbra.com/website/docs/7.2/Zimbra_OS_Release_Notes_7.2.4.pdf

+ Apache Struts 'includeParams' Bugs Permit Remote Command Execution and Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1028622
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1966
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2115

+ Apache Subversion Bugs Let Remote Authenticated Users Execute Arbitrary Commands and Deny Service
http://www.securitytracker.com/id/1028621
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1968
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2088
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2112

+ Linux Kernel 'perf' Multiple Denial of Service and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/60324

重要インフラのサイバー・テロに向けた官・民の取り組み
【第3回】重要インフラ・システム防護への取り組みの変遷（後編）
http://itpro.nikkeibp.co.jp/article/COLUMN/20130517/477526/?ST=security

日本ユニシス、米国訴訟向けのメールアーカイブ製品「ZLUA」を販売開始
http://itpro.nikkeibp.co.jp/article/NEWS/20130604/482105/?ST=security

科学技術振興機構のWebサイト改ざん、閲覧者にウイルス感染のおそれ
http://itpro.nikkeibp.co.jp/article/NEWS/20130604/481902/?ST=security