25日 金曜日、仏滅

+ RHSA-2014:0923 Important: kernel security update
https://access.redhat.com/errata/RHSA-2014:0923
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4699
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943

+ RHSA-2014:0927 Moderate: qemu-kvm security and bug fix update
https://access.redhat.com/errata/RHSA-2014:0927
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4148
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4149
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4150
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4151
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4527
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4529
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4535
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4536
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4541
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4542
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6399
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0182
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0222
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0223
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3461

+ RHSA-2014:0916 Critical: nss and nspr security update
https://access.redhat.com/errata/RHSA-2014:0916
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1544

+ PHP 5.5.15 released
http://php.net/archive/2014.php#id2014-07-24-1
http://www.php.net/ChangeLog-5.php#5.5.15

+ PostgreSQL updates 9.3.5, 9.2.9, 9.1.14, 9.0.18, 8.4.22 released
http://www.postgresql.org/about/news/1534/
http://www.postgresql.org/docs/9.3/static/release-9-3-5.html
http://www.postgresql.org/docs/9.2/static/release-9-2-9.html
http://www.postgresql.org/docs/9.1/static/release-9-1-14.html
http://www.postgresql.org/docs/9.0/static/release-9-0-18.html

+ PostgreSQL 9.4 Beta 2 Released
http://www.postgresql.org/about/news/1533/

+ DoS/PoC: Make 3.81 - Heap Overflow PoC
http://www.exploit-db.com/exploits/34164

JVNVU#99424174 Resin Pro に Unicode 文字を適切に変換しない問題
http://jvn.jp/vu/JVNVU99424174/

世界のセキュリティ・ラボから日経コミュニケーション
Google Driveを通じて非公開データが流出するおそれ
http://itpro.nikkeibp.co.jp/atcl/column/14/264220/072300004/?ST=security

記者の眼日経コンピュータ
ベネッセ事件を機に、個人情報保護ルール私案を考えてみた
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/072200008/?ST=security

「漏洩した個人情報を削除します」、ベネッセ事件便乗の怪しい電話に注意
http://itpro.nikkeibp.co.jp/atcl/news/14/072400201/?ST=security

VU#565580 BulletProof FTP Client 2010 is vulnerable to a stack-based buffer overflow
http://www.kb.cert.org/vuls/id/565580

VU#669804 TestRail cross-site scripting vulnerability
http://www.kb.cert.org/vuls/id/669804

REMOTE: Omeka 2.2.1 - Remote Code Execution Exploit
http://www.exploit-db.com/exploits/34160

DoS/PoC: BulletProof FTP Client 2010 - Buffer Overflow (SEH)
http://www.exploit-db.com/exploits/34162