27日 月曜日、赤口

+ PostgreSQL ODBC Driver 09_03_400
http://www.postgresql.org/ftp/odbc/versions/msi/

+ Mozilla Firefox 33.0.1 released
https://www.mozilla.org/en-US/firefox/33.0.1/releasenotes/

+ Ubuntu 14.10 released
https://wiki.ubuntu.com/UtopicUnicorn/ReleaseNotes

+ UPDATE: Multiple Vulnerabilities in Cisco ASA Software
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa

+ UPDATE: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle

+ Linux kernel 3.12.31 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.31

+ Dovecot 2.2.15 released
http://www.dovecot.org/list/dovecot-news/2014-October/000277.html

+ libpng 1.6.14 released
http://www.libpng.org/pub/png/src/libpng-1.6.14-README.txt

+ REMOTE: Windows OLE - Remote Code Execution "Sandworm" Exploit (MS14-060)
http://www.exploit-db.com/exploits/35055

+ DoS/PoC: OpenBSD <= 5.5 - Local Kernel Panic
http://www.exploit-db.com/exploits/35058

+ Linux Kernel iommu.c excessive unpinning
http://cxsecurity.com/issue/WLB-2014100155
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8369

+ iTunes 12.0.1 for Windows DLL Hijacking
http://cxsecurity.com/issue/WLB-2014100154

+ Linux Kernel KVM CVE-2014-8481 Incomplete Fix Denial of Service Vulnerability
http://www.securityfocus.com/bid/70712
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8481

+ Linux Kernel KVM CVE-2014-8480 Denial of Service Vulnerability
http://www.securityfocus.com/bid/70710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8480

パスロジ、パスワード記録用のマトリックス型のメモ帳「PassClip」をリリース
http://itpro.nikkeibp.co.jp/atcl/news/14/102401609/?ST=security

パロアルト、モバイル向けセキュリティソリューション最新版を発表
http://itpro.nikkeibp.co.jp/atcl/news/14/102401607/?ST=security

ITproまとめ
ShellShock
http://itpro.nikkeibp.co.jp/atcl/column/14/494329/102200030/?ST=security

JVNVU#99291862 複数の NAT-PMP デバイスが WAN 側から操作可能な問題
http://jvn.jp/vu/JVNVU99291862/

JVN#27388160 Android 版 「スマ保」における SSL/TLS サーバ証明書の検証不備の脆弱性
http://jvn.jp/jp/JVN27388160/