21日 水曜日、友引

+ Android-x86 4.4-RC released
http://www.android-x86.org/releases/releasenote-4-4-rc2

+ About the security content of OS X Server 3.1.2
http://support.apple.com/kb/HT6248
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4164

+ Google Chrome 35.0.1916.114 released
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1743
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1744
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1745
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1746
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1747
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1748

+ CESA-2014:0513 Moderate CentOS 6 libxml2 Update
http://lwn.net/Alerts/599616/

+ phpMyAdmin 4.2.2 released
http://sourceforge.net/p/phpmyadmin/news/2014/05/phpmyadmin-422-is-released/

+ Multiple Vulnerabilities in the Cisco WebEx Recording Format and Advanced Recording Format Players
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2132
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2133
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2134
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2135
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2136

+ UPDATE: Cisco IOS Software IPv6 Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-ipv6

+ HPSBGN03007 rev.1 - HP IceWall MCRP and HP IceWall SSO, Remote Denial of Service (DoS)
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04278900-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2604

+ Linux kernel 2.6.32.62 released
https://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.62

+ Symantec Workspace Streaming Arbitrary File Upload
http://cxsecurity.com/issue/WLB-2014050109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1649

+ Oracle JavaMail SMTP Header Injection
http://cxsecurity.com/issue/WLB-2014050108

Cisco、当局の監視活動の規制を米大統領に要求、新興国で大幅な受注減
http://itpro.nikkeibp.co.jp/article/NEWS/20140520/557922/?ST=security

米政府、サイバースパイ容疑で中国当局者5人を訴追
http://itpro.nikkeibp.co.jp/article/NEWS/20140520/557862/?ST=security

VU#767044 Hanvon facial recognition (Face ID) devices do not authenticate commands
http://www.kb.cert.org/vuls/id/767044