25日 月曜日、友引

+ Selenium IDE 2.6.0 released
http://code.google.com/p/selenium/wiki/SeIDEReleaseNotes

+ HPSBST03098 rev.1 - HP StoreEver MSL6480 Tape Library running OpenSSL, Remote Unauthorized Access or Disclosure of Information
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04406535-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224

+ Apache Log4j 2.0.2 released
http://logging.apache.org/log4j/2.x/changes-report.html#a2.0.2

+ PHP 5.5.16 is released
http://php.net/archive/2014.php#id2014-08-22-1
http://www.php.net/ChangeLog-5.php#5.5.16

+ Database .NET 12.6 released
http://www.postgresql.org/about/news/1539/

+ Tcl/Tk 8.5.16 released
http://www.tcl.tk/software/tcltk/8.5.html

+ Apache OpenOffice Calc Lets Remote Users Inject Commands
http://www.securitytracker.com/id/1030755
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3524

+ Apache OpenOffice OLE Object Preview Flaw May Let Remote Users Obtain Potentially Sensitive Information
http://www.securitytracker.com/id/1030754
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3575

+ SA60823 WinSCP OpenSSL Multiple Vulnerabilities
http://secunia.com/advisories/60823/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139

+ Apache Traffic Server releases for security incident
http://cxsecurity.com/issue/WLB-2014080107
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3525

FFRIが標的型攻撃対策ソフトに新版、機械学習のHIPSエンジンを追加
http://itpro.nikkeibp.co.jp/atcl/news/14/082200532/?ST=security

REMOTE: Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities
http://www.exploit-db.com/exploits/34399