22日 火曜日、友引

+ CESA-2013:1441 Moderate CentOS 6 rubygems Update
http://lwn.net/Alerts/571110/

+ CESA-2013:1436 Moderate CentOS 6 kernel Update
http://lwn.net/Alerts/570788/

+ RHSA-2013:1447 Important: java-1.7.0-openjdk security update
http://rhn.redhat.com/errata/RHSA-2013-1447.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851

+ Linux Kernel Device Mapper Snapshot Error Lets Local Users Read From Free Disk Space
http://www.securitytracker.com/id/1029217
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4299

+ Node.js HTTP Server Lets Remote Users Deny Service
http://www.securitytracker.com/id/1029210
http://cxsecurity.com/issue/WLB-2013100136
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4450

+ glibc 2.5 <= reloc types to crash bug
http://cxsecurity.com/issue/WLB-2013100132

チェックしておきたい脆弱性情報＜2013.10.22＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20131021/512283/?ST=security

Apple、同社がiMessageを読めるとの調査報告を否定---米メディアの報道
http://itpro.nikkeibp.co.jp/article/NEWS/20131021/512346/?ST=security

JVNVU#95955023 JavaServer Faces に複数の脆弱性
http://jvn.jp/cert/JVNVU95955023/index.html

JVNVU#97653535 Watchguard Extensible Threat Management (XTM) にバッファオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU97653535/index.html

REMOTE: FiberHome Modem Router HG-110 - Authentication Bypass To Remote Change DNS Servers
http://www.exploit-db.com/exploits/28450