7日 火曜日、赤口

+ OpenSSL 1.0.0l released
http://www.openssl.org/news/changelog.html

+ Sudo 1.8.9 released
http://www.sudo.ws/sudo/stable.html#1.8.9

+ CVE-2013-4353: 6th January 2014
http://www.openssl.org/news/vulnerabilities.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353

+ SA55882 Linux Kernel "recvmsg()" and "recvfrom()" Information Disclosure Weaknesses
http://secunia.com/advisories/55882/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463

+ SA56286 OpenSSL Two Denial of Service Vulnerabilities
http://secunia.com/advisories/56286/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450

Advisory: Windows 8.1 and Windows Server 2012 R2 - support for Sophos products
http://www.sophos.com/en-us/support/knowledgebase/119957.aspx

高速増殖炉もんじゅの事務用パソコンがウイルス感染、情報漏洩か
http://itpro.nikkeibp.co.jp/article/NEWS/20140106/528106/?ST=security

JVNVU#553166 BlogEngine.NET に情報漏えいの脆弱性
http://jvn.jp/cert/JVNVU553166/index.html