MS, 2011 年 02 月のセキュリティ更新, Adobe Reader 9.4.2/10.0.1, Flash Player 10.2.152.26, Google Chrome 9.0.597.94, ClamAV 0.97, WordPress 3.0.5

Adobe Reader 9.4.2 and 10.0.1 Updates are out (SANS ISC)
Adobe Flash Player Multiple Vulnerabilities (Secunia) [4/5] 10.2.152.26

Sun Java JDK / JRE / SDK “doubleValue()” Denial of Service Vulnerability (Secunia) [3/5]

Secunia の Solution に従って FPUpdater を実行してみる。

c:\Users\Administrator\Desktop>java -jar fpupdater.jar --update --verbose
FPUpdater
java.home: C:\Program Files\Java\jre6
java.vendor: Sun Microsystems Inc.
java.version: 1.6.0_23
os.name: Windows 7
Checking for update for major: 1.6.0 minor: 23
Retrieved update jar file from tool: C:\Program Files\Java\jre6\tmpUpdate637638546486123129\tmpUpdate7980461141584885088.jar
Updating files. Please note this can take several minutes to run. Allow FPUpdater tool to complete.
Jar file C:\Program Files\Java\jre6\lib\rt.jar.fpupdater succesfully verified.
Done backup of rt.jar to C:\Program Files\Java\jre6\lib\rt.jar.fpupdater
Extracting C:\Program Files\Java\jre6\lib\rt.jar to working copy C:\Program Files\Java\jre6\lib\tmpUpdate3569841236808183619\copyofRt.jar
Recreating rt.jar
Rebuilt.
Jar file C:\Program Files\Java\jre6\lib\tmpUpdate3569841236808183619\copyofRt.jar succesfully verified.
Moving working copy of rt.jar back to live rt.jar.
Update applied successfully to java.home path : C:\Program Files\Java\jre6

もう一度実行してもリビルドは走らない。当たっているのかな？

c:\Users\Administrator\Desktop>java -jar fpupdater.jar --update --verbose
FPUpdater
java.home: C:\Program Files\Java\jre6
java.vendor: Sun Microsystems Inc.
java.version: 1.6.0_23
os.name: Windows 7
Backup file exists, patch already applied.

Google Chrome Multiple Vulnerabilities (Secunia) [4/5] 9.0.597.94
Snort 2.9.0.4 is coming out Thursday, ClamAV 0.97 update released (SANS ISC)
OpenSSL ClientHello Handshake Message Parsing Vulnerability (Secunia) 0.9.8r, 1.0.0d
WordPress 3.0.5 (and 3.1 RC4) are out (SANS ISC)
Kerberos Multiple Denial of Service Vulnerabilities (Secunia) [3/5]
RealPlayer Predictable Temporary Filename Code Execution Vulnerability (Secunia) [4/5]
Ruby on Rails Filter Bypass and SQL Injection Vulnerabilities (Secunia) [3/5]
Ruby on Rails Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (Secunia) [2/5]
TippingPoint、MS や IBM 製品の未解決の脆弱性情報を公開 (ITmedia)
2010 年下半期 Tokyo SOC 情報分析レポート公開 (Tokyo SOC Report)
DNSCurve の紹介 (NetAgent Official Blog) DNS サーバの djbdns や HTTP サーバの publicfile などで知られるイリノイ大学の D. J. Bernstein 氏が、DNSSEC の諸問題を指摘するとともに、対案として DNSCurve を提案しています。
【八百長相撲】携帯データ、高確率で復元分析には時間も＋ (MSN産経)
ますます空港セキュリティーチェックが厳しくなってる本当の理由… 驚くべき爆破テロの隠し手口アラカルト！ (動画あり) (Gizmodo Japan)

MS, 2011 年 02 月のセキュリティ更新

Red Hat Security Advisory