15日 金曜日、友引

+ RHSA-2014:1060 Low: Transition Red Hat Network Classic Hosted to Red Hat Subscription Management
https://rhn.redhat.com/errata/RHSA-2014-1060.html

+ CESA-2014:1053 Moderate CentOS 5 openssl Update
http://lwn.net/Alerts/608634/

+ CESA-2014:1052 Moderate CentOS 7 openssl Security Update
http://lwn.net/Alerts/608635/

+ CESA-2014:1052 Moderate CentOS 6 openssl Update
http://lwn.net/Alerts/608636/

+ Linux kernel 3.16.1, 3.15.10, 3.14.17, 3.10.53, 3.4.103 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.1
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.10
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.17
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.53
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.103

+ PHP 5.3.29 released
http://php.net/archive/2014.php#id2014-08-14-1
http://www.php.net/ChangeLog-5.php#5.3.29

+ Google Chrome Multiple Bugs Let Remote Users Execute Arbitrary Code and Obtain Information
http://www.securitytracker.com/id/1030732

+ Apple Safari WebKit Bugs Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1030731

+ Fujitsu ServerView Operations Manager Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/59210/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3898

+ Google Chrome for iOS SPDY Information Disclosure Vulnerability
http://secunia.com/advisories/60685/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3166

+ Apple Safari WebKit Multiple Memory Corruption Vulnerabilities
http://secunia.com/advisories/60705/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1384
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1385
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1386
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1388
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1389
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1390

JVNDB-2014-000098 Android 版 Ameba における SSL サーバ証明書の検証不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000098.html

JVNVU#93577368 Apple Safari における複数の脆弱性に対するアップデート
http://jvn.jp/vu/JVNVU93577368/index.html

JVN#27702217 Android 版 Ameba における SSL サーバ証明書の検証不備の脆弱性
http://jvn.jp/jp/JVN27702217/index.html

REMOTE: VMTurbo Operations Manager 4.6 vmtadmin.cgi Remote Command Execution
http://www.exploit-db.com/exploits/34335

REMOTE: VirtualBox 3D Acceleration Virtual Machine Escape
http://www.exploit-db.com/exploits/34334