5日 木曜日、先勝

+ Google Chrome 31.0.1650.63 released
http://googlechromereleases.blogspot.jp/2013/12/stable-channel-update.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6634
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6635
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6636
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6637
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6638
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6639
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6640

+ CESA-2013:1778 Moderate CentOS 6 gimp Update
http://lwn.net/Alerts/575603/

+ CESA-2013:1778 Moderate CentOS 5 gimp Update
http://lwn.net/Alerts/575604/

+ CESA-2013:1779 Moderate CentOS 6 mod_nss Update
http://lwn.net/Alerts/575605/

+ CESA-2013:1779 Moderate CentOS 5 mod_nss Update
http://lwn.net/Alerts/575606/

+ phpMyAdmin 4.0.10 is released
http://sourceforge.net/p/phpmyadmin/news/2013/12/phpmyadmin-4010-is-released/

+ Linux kernel 3.12.3, 3.10.22, 3.4.72 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.3
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.22
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.72

+ VMSA-2013-0014 VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation
http://www.vmware.com/security/advisories/VMSA-2013-0014.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3519

+ VMware Workstation/Fusion Bug in 'lgtosync.sys' Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1029430
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3519

+ VMware ESX/ESXi Bug in 'lgtosync.sys' Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1029429
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3519

+ Windows Kernel Bug in IsHandleEntrySecure() Lets Local Users Deny Service
http://www.securitytracker.com/id/1029426

+ LOCAL: Windows NDPROXY Local SYSTEM Privilege Escalation
http://www.exploit-db.com/exploits/30014

+ DoS/PoC: MySQL 5.0.x IF Query Handling Remote Denial Of Service Vulnerability
http://www.exploit-db.com/exploits/30020

+ SA55922 Linux Kernel Multiple Vulnerabilities
http://secunia.com/advisories/55922/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2929

+ SA55684 VMware Multiple Products LGTOSYNC Guest Privilege Escalation Vulnerability
http://secunia.com/advisories/55684/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3519

Deep Discovery Inspector 3.5 Critical Patch (Build 1013) 公開のお知らせ
http://app.trendmicro.co.jp/support/news.asp?id=2042

Trend Micro Network VirusWall Enforcer 1200 バージョン 2.0 Critical Patch (Build 1046) 公開のお知らせ
http://app.trendmicro.co.jp/support/news.asp?id=2043

日本を守る「七人の侍」
「卵」育てる試み、日本でも始まる
http://itpro.nikkeibp.co.jp/article/COLUMN/20131115/518341/?ST=security

JVNVU#98848993 AT&T Connect Participant Application for Windows にバッファオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU98848993/index.html