11日 金曜日、友引

+ CESA-2014:0861 Moderate CentOS 7 lzo Update
http://lwn.net/Alerts/604997/

+ CESA-2014:0867 Moderate CentOS 7 samba Update
http://lwn.net/Alerts/604998/

+ CESA-2014:0866 Moderate CentOS 6 samba Update
http://lwn.net/Alerts/604999/

+ CESA-2014:0866 Moderate CentOS 5 samba3x Update
http://lwn.net/Alerts/605000/

+ CESA-2014:0865 Moderate CentOS 6 tomcat6 Update
http://lwn.net/Alerts/605001/

+ HPSBGN03068 rev.1 - HP OneView running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, Disclosure of Information
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04368264-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224

+ HPSBMU03070 rev.1 - HP Cloud Service Automation, OpenSSL Vulnerability, Unauthorized Access, Disclosure of Information
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04368546-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224

+ HPSBMU03069 rev.1 - HP Software Operation Orchestration, OpenSSL Vulnerability, SSL/TLS, Remote Code Execution, Denial of Service (DoS), Disclosure of Information
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04368523-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470

+ Oracle Critical Patch Update Pre-Release Announcement - July 2014
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

+ Android NFC Denial Of Service
http://cxsecurity.com/issue/WLB-2014070055

+ SA59827 MySQL Workbench OpenSSL SSL/TLS Handshakes Security Issue
http://secunia.com/advisories/59827/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224

HTTPS Inspection update for attending India CCA unauthorized digital certificates
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101565&src=securityAlerts

【続報】対象者は4000万人超か、ベネッセ個人情報漏えいの調査経緯
http://itpro.nikkeibp.co.jp/article/NEWS/20140709/570325/?ST=security

従業員に「守ってもらう」ルール作りの秘訣
http://itpro.nikkeibp.co.jp/article/COLUMN/20140708/569893/?ST=security

記者の眼日経コンピュータ
15年超IT系記者のプライドがポッキリ折れた話
http://itpro.nikkeibp.co.jp/article/Watcher/20140709/570123/?ST=security

ジャストシステム、ベネッセからの面会要請に「協議には応じる」
http://itpro.nikkeibp.co.jp/article/NEWS/20140710/570743/?ST=security

経済産業省、情報漏洩でベネッセコーポレーションに書面報告を要請
http://itpro.nikkeibp.co.jp/article/NEWS/20140710/570707/?ST=security

JVNVU#98939460 Liferay Portal に複数のクロスサイトスクリプティングの脆弱性
http://jvn.jp/vu/JVNVU98939460/index.html

VU#712660 Raritian PX power distribution software is vulnerable to the cipher zero attack.
http://www.kb.cert.org/vuls/id/712660