6日 水曜日、先勝

+ RHSA-2013:1505 Important: java-1.6.0-openjdk security update
http://rhn.redhat.com/errata/RHSA-2013-1505.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850

+ CESA-2013:1500 Moderate CentOS 6 gc Update
http://lwn.net/Alerts/572861/

+ UPDATE: Multiple Vulnerabilities in Cisco Prime Data Center Network Manager
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm

+ Security Update for Adaptive Server Enterprise (ASE)
http://www.sybase.com/detail?id=1099371

+ jetty-hightide 8.1.14, 7.6.14 released
http://dist.codehaus.org/jetty/jetty-hightide-8.1.14/
http://dist.codehaus.org/jetty/jetty-hightide-7.6.14/

+ Microsoft Windows Memory Corruption Error in Graphics Component Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1029299
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3906

+ Linux Kernel Multiple Security fixes
http://cxsecurity.com/issue/WLB-2013110023
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4512
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4513
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4516

+ Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow
http://cxsecurity.com/issue/WLB-2013110028

+ Linux Kernel 'drivers/staging/wlags49_h2/wl_priv.c' Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/63509

JVNDB-2013-000100 Tiki Wiki CMS Groupware における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000100.html

JVNDB-2013-000099 Tiki Wiki CMS Groupware におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000099.html

JVNVU#98012998 Attachmate Verastream Host Integrator に任意のファイルを上書き可能な脆弱性
http://jvn.jp/cert/JVNVU98012998/

チェックしておきたい脆弱性情報＜2013.11.06＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20131104/515703/?ST=security

いい加減なパスワード管理にまつわる苦い経験
http://itpro.nikkeibp.co.jp/article/Watcher/20131101/515425/?ST=security

トレンドマイクロ、企業向けに社内外とファイルを共有できるソフトウエアを発表
http://itpro.nikkeibp.co.jp/article/NEWS/20131105/516048/?ST=security