19日 金曜日、大安

+ CESA-2013:1090 Moderate CentOS 5 ruby Update
http://lwn.net/Alerts/559455/

+ CESA-2013:1090 Moderate CentOS 6 ruby Update
http://lwn.net/Alerts/559456/

+ CESA-2013:X002 Important Xen4CentOS kernel Update
http://lwn.net/Alerts/559454/

+ Multiple Vulnerabilities in Cisco Intrusion Prevention System Software
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips

+ HPSBMU02900 rev.1 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03839862-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ UPDATE: HPSBST02896 rev.2 - HP StoreVirtual Storage, Remote Unauthorized Access
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03825537-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ PHP 5.5.1 Released
http://www.php.net/ChangeLog-5.php#5.5.1

+ LOCAL: Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation
http://www.exploit-db.com/exploits/26950

+ DoS/PoC: Windows Movie Maker Version 2.1.4026.0 (.wav) - Crash POC
http://www.exploit-db.com/exploits/26951

+ Windows Movie Maker Version 2.1.4026.0 (.wav) - Crash POC
http://cxsecurity.com/issue/WLB-2013070145

チェックしておきたい脆弱性情報＜2013.07.19＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20130717/491863/?ST=security

セキュリティ・ホットトピックスITpro
安易な承認を控え「通知」を設定、アカウント乗っ取りへの対抗策
詳説・Facebook乗っ取り攻撃から身を守る（後）
http://itpro.nikkeibp.co.jp/article/COLUMN/20130717/491884/?ST=security

Apache Struts2の脆弱性を悪用した攻撃が急増、ラックが緊急で注意喚起
http://itpro.nikkeibp.co.jp/article/NEWS/20130718/492361/?ST=security

Google Glassが不正な二次元コードでハッキングされる脆弱性、すでに修正済み
http://itpro.nikkeibp.co.jp/article/NEWS/20130718/492182/?ST=security