4日 水曜日、大安

+ RHSA-2014:0594 Important: gnutls security update
https://rhn.redhat.com/errata/RHSA-2014-0594.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469

+ RHSA-2014:0597 Moderate: squid security update
https://rhn.redhat.com/errata/RHSA-2014-0597.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0128

+ RHSA-2014:0596 Moderate: libtasn1 security update
https://rhn.redhat.com/errata/RHSA-2014-0596.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469

+ RHSA-2014:0595 Important: gnutls security update
https://rhn.redhat.com/errata/RHSA-2014-0595.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466

+ Opera 22 released
http://www.opera.com/docs/changelogs/unified/2200/

+ FreeBSD-SA-14:13.pam Incorrect error handling in PAM policy parser
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:13.pam.asc

+ FreeBSD-SA-14:12.ktrace ktrace kernel memory disclosure
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:12.ktrace.asc

+ FreeBSD-SA-14:11.sendmail sendmail improper close-on-exec flag handling
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:11.sendmail.asc

+ Samba 4.1.8 Available for Download
http://samba.org/samba/history/samba-4.1.8.html

+ PHP CDF Processing Flaws Let Remote Users Deny Service
http://www.securitytracker.com/id/1030321
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238

+ Trend Micro InterScan Messaging Security Virtual Appliance Input Validation Hole Permits Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1030318

+ McAfee Network Data Loss Prevention Bugs Let Remote Users Deny Service, Inject SQL Commands, and Conduct Clickjacking Attacks
http://www.securitytracker.com/id/1030317

+ SA59006 Opera Multiple Vulnerabilities
http://secunia.com/advisories/59006/

+ PHP 5.5.12 denial of service (infinite loop or out-of-bounds memory access)
http://cxsecurity.com/issue/WLB-2014060015
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238

+ PHP 5.5.12 denial of service (performance degradation) by_printf
http://cxsecurity.com/issue/WLB-2014060014
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237

+ Opera Web Browser Prior to 22.0 Multiple Unspecified Security Vulnerabilities
http://www.securityfocus.com/bid/67790

HISやバッファローのウイルス感染は、CDNetworksの改ざん被害が関与
http://itpro.nikkeibp.co.jp/article/NEWS/20140603/561262/?ST=security

脅威の「ゲームオーバー・ゼウス」、10カ国以上が連携して追い詰める
http://itpro.nikkeibp.co.jp/article/NEWS/20140603/561145/?ST=security