20日 金曜日、先負

+ RHSA-2014:0771 Important: kernel security and bug fix update
https://rhn.redhat.com/errata/RHSA-2014-0771.html
CVE-2013-6378
CVE-2014-0203
CVE-2014-1737
CVE-2014-1738
CVE-2014-1874
CVE-2014-2039
CVE-2014-3153

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

+ Additional response to SSL/TLS MITM vulnerability (CVE-2014-0224)
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101356&src=securityAlerts
CVE-2014-0224

+ PHP 5.6.0RC1 is available
http://www.php.net/archive/2014.php#id2014-06-19-1

+ Linux Kernel PI Futex Requeuing Bug Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1030451
CVE-2014-3153

+ SA59337 Microsoft Products Malware Protection Engine File Parsing Denial of Service Vulnerability
http://secunia.com/advisories/59337/
CVE-2014-2779

ソフォスがUTMを刷新、性能向上で複数の機能を同時実行可能に
http://itpro.nikkeibp.co.jp/article/NEWS/20140619/565467/?ST=security

脆弱性を見つけたら最大100万円謝礼、サイボウズが報奨金制度を開始
http://itpro.nikkeibp.co.jp/article/NEWS/20140619/565426/?ST=security

アズジェント、トレンドマイクロとサイバー攻撃の可視化サービス提供
http://itpro.nikkeibp.co.jp/article/NEWS/20140619/565407/?ST=security

パロアルト、国内404社のサイバー攻撃の実態を報告
http://itpro.nikkeibp.co.jp/article/NEWS/20140619/565363/?ST=security

CDNetworksのウイルス被害、認証サーバーを介さずに直接改ざん
http://itpro.nikkeibp.co.jp/article/NEWS/20140619/565342/?ST=security

JVNVU#93510009 Belkin N150 におけるディレクトリトラバーサルの脆弱性
http://jvn.jp/vu/JVNVU93510009/index.html

REMOTE: Ericom AccessNow Server Buffer Overflow
http://www.exploit-db.com/exploits/33817