20日 水曜日、先負

+ Opera 18 released
http://www.opera.com/docs/changelogs/unified/1800/

+ nginx security advisory (CVE-2013-4547)
http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4547

+ FreeBSD-SA-13:14.openssh: OpenSSH AES-GCM memory corruption vulnerability
http://www.freebsd.org/security/advisories/FreeBSD-SA-13:14.openssh.asc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4548

+ Dovecot 2.2.8 released
http://www.dovecot.org/list/dovecot-news/2013-November/000265.html

+ Samba 4.0.12 Available for Download
http://samba.org/samba/history/samba-4.0.12.html

+ nginx URI Parsing Flaw Lets Remote Users Bypass Security Restrictions
http://www.securitytracker.com/id/1029363
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4547

+ Mozilla Firefox Bugs Let Remote Users Deny Service and Bypass Security Restrictions
http://www.securitytracker.com/id/1029359
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1741
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2566
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5606
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5607

+ Linux kernel nfs missing check for buffer length
http://cxsecurity.com/issue/WLB-2013110137
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4591

+ Linux kernel kvm memory leak (DoS)
http://cxsecurity.com/issue/WLB-2013110136
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592

+ Apple MacOSX 10.9 Hard Link Memory Corruption
http://cxsecurity.com/issue/WLB-2013110059
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6799

+ Facebook Open Redirection
http://cxsecurity.com/issue/WLB-2013110127

+ SA55720: Opera Unspecified Vulnerabilities
http://secunia.com/advisories/55720/

+ OpenSSH 'sshd' Process Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/63605
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4548

2012年国内DLP市場は43億円、2017年には105億円市場に---IDC Japan調査
http://itpro.nikkeibp.co.jp/article/NEWS/20131119/519042/?ST=security

キヤノンIT、ユーザー数無制限の統合メールセキュリティゲートウエイを出荷
http://itpro.nikkeibp.co.jp/article/NEWS/20131119/519012/?ST=security

Yahoo！、来年3月末までにデータセンター間の全情報を暗号化
http://itpro.nikkeibp.co.jp/article/NEWS/20131119/518857/?ST=security

Google、「Safari」を介したWeb履歴追跡問題で37州と1700万ドルで和解
http://itpro.nikkeibp.co.jp/article/NEWS/20131119/518852/?ST=security

JVNVU#94629327 Adobe ColdFusion に複数の脆弱性
http://jvn.jp/cert/JVNVU94629327/