8日 月曜日、仏滅

+ HPSBST03106 rev.1 - HP P2000 G3 MSA Array System running OpenSSL, Remote Unauthorized Access or Disclosure of Information
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04438404-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224

+ HPSBUX03102 SSRT101681 rev.1 - HP-UX Apache Server Suite running Apache Tomcat or PHP, Remote Execution of Arbitrary Code and Denial of Service (DoS) and Other Vulnerabilities
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04223376-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0075
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0096
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0099
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0119
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3981
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049

+ Linux kernel 3.16.2, 3.14.18, 3.12.28, 3.10.54 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.18
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.28
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.54

+ glibc 2.20 released
https://sourceware.org/ml/libc-alpha/2014-09/msg00088.html

+ Microsoft Office 2010 registers command lines with unquoted pathnames
http://cxsecurity.com/issue/WLB-2014090026

+ Microsoft Windows perfect forward secrecy
http://cxsecurity.com/issue/WLB-2014090027

JVNVU#90369988 複数の Android アプリに SSL 証明書を適切に検証しない脆弱性
http://jvn.jp/vu/JVNVU90369988/

JVNVU#95304841 Arris 製ケーブルモデム Touchstone DG950A に情報漏えいの脆弱性
http://jvn.jp/vu/JVNVU95304841/

JVNVU#90686659 Netmaster 製ケーブルモデム CBW700N における情報漏えいの脆弱性
http://jvn.jp/vu/JVNVU90686659/

News ＆ Trend
ヌード写真流出は対岸の火事ではない、iCloud事件の教訓
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/090400047/?ST=security

【週末スペシャル】
セキュリティは「守る」から「被害を抑える」へ、CSIRTの構築が急務
http://itpro.nikkeibp.co.jp/atcl/column/14/255608/090300013/?ST=security

ITpro NOW
お披露目がなくなったウイルス対策ソフト
http://itpro.nikkeibp.co.jp/atcl/column/14/560135/090400038/?ST=security