2日 火曜日、友引

+ Mozilla Firefox 34.0.5 released
https://www.mozilla.org/en-US/firefox/34.0.5/releasenotes/

+ Mozilla Thunderbird 31.3 released
https://www.mozilla.org/ja/security/known-vulnerabilities/thunderbird/

+ MFSA-2014-90 Apple CoreGraphics framework on OS X 10.10 logging input data to /tmp directory
https://www.mozilla.org/ja/security/advisories/mfsa2014-90/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1595

+ MFSA-2014-89 Bad casting from the BasicThebesLayer to BasicContainerLayer
https://www.mozilla.org/ja/security/advisories/mfsa2014-89/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1594

+ MFSA-2014-88 Buffer overflow while parsing media content
https://www.mozilla.org/ja/security/advisories/mfsa2014-88/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1593

+ MFSA-2014-87 Use-after-free during HTML5 parsing
https://www.mozilla.org/ja/security/advisories/mfsa2014-87/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1592

+ MFSA-2014-86 CSP leaks redirect data via violation reports
https://www.mozilla.org/ja/security/advisories/mfsa2014-86/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1591

+ MFSA-2014-85 XMLHttpRequest crashes with some input streams
https://www.mozilla.org/ja/security/advisories/mfsa2014-85/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1590

+ MFSA-2014-84 XBL bindings accessible via improper CSS declarations
https://www.mozilla.org/ja/security/advisories/mfsa2014-84/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1589

+ MFSA-2014-83 Miscellaneous memory safety hazards (rv:34.0 / rv:31.3)
https://www.mozilla.org/ja/security/advisories/mfsa2014-83/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1587
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1588

+ CESA-2014:1912 Moderate CentOS 7 ruby Security Update
http://lwn.net/Alerts/623853/

+ CESA-2014:1911 Moderate CentOS 6 ruby Security Update
http://lwn.net/Alerts/623852/

+ MySQL 5.6.22 released
http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html

+ Samba 4.1.14 Available for Download
http://samba.org/samba/history/samba-4.1.14.html

JVNDB-2014-000136 SEIL シリーズルータにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000136.html

JVNDB-2014-000135 SEIL シリーズルータにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000135.html

米CapyがアバターCAPTCHA提供開始、複雑なパズルでリスト型攻撃を抑止
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/120100118/?ST=security

トレンドマイクロが家庭向けセキュリティサービス、家族の端末を台数制限なしで保護
http://itpro.nikkeibp.co.jp/atcl/news/14/120102071/?ST=security

ソニーピクチャーズへのサイバー攻撃、北朝鮮が関与か
http://itpro.nikkeibp.co.jp/atcl/news/14/120102067/?ST=security