30日 木曜日、大安

+ CESA-2014:0103 Moderate CentOS 6 libvirt Update
http://lwn.net/Alerts/583123/

+ Linux kernel 3.13.1, 3.4.78 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.1
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.78

+ RHSA-2014:0108 Moderate: kernel security and bug fix update
http://rhn.redhat.com/errata/RHSA-2014-0108.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4494

+ curl and libcurl 7.35.0 released
http://curl.haxx.se/changes.html#7_35_0

+ libcurl re-use of wrong HTTP NTLM connection
http://curl.haxx.se/docs/adv_20140129.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015

+ OpenSSH J-PAKE protocol remote memory corruption
http://cxsecurity.com/issue/WLB-2014010209
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1692

+ Linux Kernel netfilter nf_nat leakage of uninitialized buffer in IRC NAT
http://cxsecurity.com/issue/WLB-2014010204
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1690

+ REMOTE: Oracle Forms and Reports 11.1 - Remote Exploit
http://www.exploit-db.com/exploits/31253

+ OpenSSH 'schnorr.c' Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/65230
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1692

Sophos SafeGuard Disk Encryption for Mac - Compatibility with OS X 10.8 (Mountain Lion)
http://www.sophos.com/en-us/support/knowledgebase/118132.aspx

米政府と米技術企業が透明性向上で一部合意---米メディアが報道
http://itpro.nikkeibp.co.jp/article/NEWS/20140129/533090/?ST=security

REMOTE: Simple E-Document Arbitrary File Upload
http://www.exploit-db.com/exploits/31264