26日 月曜日、先勝

+ CESA-2014:0536 Moderate CentOS 5 mysql55-mysql Update
http://lwn.net/Alerts/600077/

+ CESA-2014:0537 Moderate: mysql55-mysql SCL Security Update
http://lwn.net/Alerts/600078/

+ UPDATE: OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed

+ UPDATE: HPSBMU03009 rev.3 - HP CloudSystem Foundation and HP CloudSystem Enterprise Software running OpenSSL, Remote Disclosure of Information
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04249113-3%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ UPDATE: HPSBUX02960 SSRT101419改訂版2 － NTP を実行する HP-UX、リモート サービス拒否 (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04093819-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ Tomcat 7.0.54, 6.0.41 Released
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

+ Windows 8 Touch Injection API doesn't handle memory pressure PoC
http://cxsecurity.com/issue/WLB-2014050132

+ Windows 8 Touch Injection API doesn't handle memory pressure
http://cxsecurity.com/issue/WLB-2014050131

+ SA58768 Microsoft Internet Explorer CMarkup Objects Use-After-Free Vulnerability
http://secunia.com/advisories/58768/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1770

DBD::Pg 3.2.1 released
http://www.postgresql.org/about/news/1525/

Windowsをスリープモードに移行するボタン型USBデバイス
http://itpro.nikkeibp.co.jp/article/NEWS/20140522/558672/?ST=security

JVNVU#96683802 Bizagi BPM Suite に複数の脆弱性
http://jvn.jp/vu/JVNVU96683802/

DoS/PoC: Core FTP Server Version 1.2, build 535, 32-bit - Crash P.O.C.
http://www.exploit-db.com/exploits/33495