17日 月曜日、赤口

+ Google Chrome 33.0.1750.152 released
http://googlechromereleases.blogspot.jp/2014/03/stable-channel-update_14.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1713
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1714
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1715
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1715

+ CESA-2014:0292 Important CentOS 6 389-ds-base Update
http://lwn.net/Alerts/590718/

+ CESA-2014:0285 Important CentOS 5 kernel Update
http://lwn.net/Alerts/590719/

+ CESA-2014:0293 Important CentOS 6 udisks Update
http://lwn.net/Alerts/590720/

+ Apache HTTP Server 2.4.9 Released
http://www.apache.org/dist/httpd/Announcement2.4.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438

+ libpng 1.6.10, 1.2.51 released
http://www.libpng.org/pub/png/src/libpng-1.6.10-README.txt
http://www.libpng.org/pub/png/src/libpng-1.2.51-README.txt

+ OpenSSH 6.6 released
http://www.openssh.com/txt/release-6.6

+ MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service
http://cxsecurity.com/issue/WLB-2014030108
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4051
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4052
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3336

+ iOS 7 Arbitrary Code Execution
http://cxsecurity.com/issue/WLB-2014030126
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1287

+ SA57366 Samba smbcacls Access Control Lists Handling Security Issue
http://secunia.com/advisories/57366/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6442

+ Google Chrome Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/66239

+ Apple iOS PRNG Entropy Weakness
http://www.securityfocus.com/bid/66236

+ Samba 'smbcacls' Command Security Bypass Vulnerability
http://www.securityfocus.com/bid/66232
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6442

ウイルスバスター ビジネスセキュリティ 7.0 Service Pack 1 Windows 8.1 / Server 2012 R2 対応パッチ 一時公開停止のお知らせ
http://app.trendmicro.co.jp/support/news.asp?id=2084

不正送金被害が過去最悪ペース、2014年2月までに6億円の被害
http://itpro.nikkeibp.co.jp/article/NEWS/20140314/543828/?ST=security

Zuckerberg CEOが当局の監視活動に関して大統領に電話、「政府に失望」
http://itpro.nikkeibp.co.jp/article/NEWS/20140314/543502/?ST=security

JVNVU#93903343 WatchGuard Fireware XTM にクロスサイトスクリプティングの脆弱性
http://jvn.jp/vu/JVNVU93903343/

VU#381692 Webmin contains a cross-site scripting vulnerability
http://www.kb.cert.org/vuls/id/381692

Kaspersky 14.0.0.4651 Remote Denial of Service PoC *youtube
http://cxsecurity.com/issue/WLB-2014030106