31日 水曜日、大安

+ RHSA-2013:1119 Moderate: 389-ds-base security and bug fix update
http://rhn.redhat.com/errata/RHSA-2013-1119.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2219

+ RHSA-2013:1114 Important: bind security update
http://rhn.redhat.com/errata/RHSA-2013-1114.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4854

+ CESA-2013:1114 Important CentOS 6 bind Update
http://lwn.net/Alerts/561420/

+ CESA-2013:1115 Important CentOS 5 bind97 Update
http://lwn.net/Alerts/561421/

+ UPDATE: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp

+ RHSA-2013:1121 Low: sos security update
http://rhn.redhat.com/errata/RHSA-2013-1121.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2664

+ MySQL 5.6.13, 5.5.33, 5.1.71 released
http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-33.html
http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html

+ GnuPG 1.4.14 released
http://lists.gnupg.org/pipermail/gnupg-announce/2013q3/000330.html

+ phpMyAdmin 3.5.x/4.0.x privilege escalation
http://cxsecurity.com/issue/WLB-2013070230

+ phpMyAdmin 3.5.x/4.0.x self-XSS
http://cxsecurity.com/issue/WLB-2013070229

+ Microsoft Windows Kernel HWND_BROADCAST Privilege Escalation
http://cxsecurity.com/issue/WLB-2013070226

+ Microsoft Remote Desktop User/Password Reader Exploit (.py)
http://cxsecurity.com/issue/WLB-2013070218

+ ISC BIND 9 DNS RDATA Handling CVE-2013-4854 Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/61479
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4854

世界のセキュリティ・ラボから日経コミュニケーション
第1四半期の脅威レポート、注意すべき3つの傾向
http://itpro.nikkeibp.co.jp/article/COLUMN/20130725/494184/?ST=security

第3回　不正アプリが集めた個人情報、何に使われる？
http://itpro.nikkeibp.co.jp/article/COLUMN/20130725/494092/?ST=security

ヤマハのネットワークエンジニア会が一般会員の募集を開始、Win8対応VPNソフトも発表
http://itpro.nikkeibp.co.jp/article/NEWS/20130730/495383/?ST=security

マカフィー、Intel CPU連携のルートキット検出ソフトがサーバー機も対象に
http://itpro.nikkeibp.co.jp/article/NEWS/20130730/495274/?ST=security

NSA問題、米国のクラウド企業にマイナスの影響（WIRED.jp）
http://itpro.nikkeibp.co.jp/article/NEWS/20130730/495122/?ST=security

JVNVU#99862428 TrustGo Antivirus & Mobile Security にサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/cert/JVNVU99862428/