14日 金曜日、先負

+ Linux kernel 3.13.3, 3.12.11, 3.10.30, 3.4.80 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.3
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.11
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.30
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.80

+ SYM14-004 Security Advisories Relating to Symantec Products - Symantec Endpoint Protection Manager Vulnerabilities
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00

+ Dovecot 2.2.12 released
http://www.dovecot.org/list/dovecot-news/2014-February/000270.html

+ DoS/PoC: Apache Commons FileUpload and Apache Tomcat Denial-of-Service
http://www.exploit-db.com/exploits/31615

+ Microsoft Windows 7 ASLR with a little help by MS-Help
http://cxsecurity.com/issue/WLB-2014020096
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0295

+ PHP 'ext/gd/gd.c' Heap Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/65533
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7226

Check Point response to "Check Point Connection Table Leakage"
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98553&src=securityAlerts

バレンタインにセクシー画像を送る日本人は6％、中国やブラジルは半数が送信
http://itpro.nikkeibp.co.jp/article/NEWS/20140213/536622/?ST=security

「セキュリティベンダーでは守れない」、日本MSらがXPのサポート終了を警告
http://itpro.nikkeibp.co.jp/article/NEWS/20140213/536586/?ST=security

企業内にオーダーメイドのCSIRTを構築/運用する支援サービス、NRIセキュアが提供
http://itpro.nikkeibp.co.jp/article/NEWS/20140213/536496/?ST=security

LOCAL: Easy CD-DA Recorder PLS Buffer Overflow
http://www.exploit-db.com/exploits/31643