17日 金曜日、仏滅

+ RHSA-2019:1235 Important: ruby security update
https://access.redhat.com/errata/RHSA-2019:1235
CVE-2019-8322
CVE-2019-8323
CVE-2019-8324
CVE-2019-8325

+ CESA-2019:1180 Important CentOS 6 libvirt Security Update
https://lwn.net/Articles/788638/

+ CESA-2019:1169 Important CentOS 6 kernel Security Update
https://lwn.net/Articles/788636/

+ CESA-2019:1168 Important CentOS 7 kernel Security Update
https://lwn.net/Articles/788637/

+ CESA-2019:1131 Important CentOS 7 freeradius Security Update
https://lwn.net/Articles/788635/

+ CESA-2019:1181 Important CentOS 6 qemu-kvm Security Update
https://lwn.net/Articles/788640/

+ CESA-2019:1177 Important CentOS 7 libvirt Security Update
https://lwn.net/Articles/788639/

+ CESA-2019:1178 Important CentOS 7 qemu-kvm Security Update
https://lwn.net/Articles/788641/

+ VMware Workstation 15.1.0 Player released
https://docs.vmware.com/en/VMware-Workstation-Player/15/rn/VMware-Workstation-151-Player-Release-Notes.html

+ ISC BIND 9.15.0, 9.14.2, 9.11.7 released
https://ftp.isc.org/isc/bind9/9.15.0/RELEASE-NOTES-bind-9.15.0.html
https://ftp.isc.org/isc/bind9/9.14.2/RELEASE-NOTES-bind-9.14.2.html
https://ftp.isc.org/isc/bind9/9.11.7/RELEASE-NOTES-bind-9.11.7.html

+ Linux kernel 5.1.3, 5.0.17, 4.19.44, 4.14.120, 4.9.177, 4.4.180, 3.18.140 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.3
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.17
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.44
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.120
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.177
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.180
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.140

+ UPDATE: Oracle Critical Patch Update Advisory - April 2019
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

+ PostgreSQL 11.3, 10.8, 9.6.13, 9.5.17, and 9.4.22 Released
https://www.postgresql.org/docs/11/release-11-3.html
https://www.postgresql.org/docs/10/release-10-8.html
https://www.postgresql.org/docs/9.6/release-9-6-13.html
https://www.postgresql.org/docs/9.5/release-9-5-17.html
https://www.postgresql.org/docs/9.4/release-9-4-22.html

意外に知らないサイトブロッキング
「サイトブロッキング」が日本で暗礁に乗り上げた理由
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/00741/051000003/?ST=nxt_thmit_security

セキュリティー製品 売れ行きチェック
省力化と分かりやすさが重要、キヤノンMJに聞く売れた・売れないセキュリティー製品
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/00709/041500007/?ST=nxt_thmit_security

「米国企業や消費者の利益を阻害」、ファーウェイが米大統領令にコメント
https://tech.nikkeibp.co.jp/atcl/nxt/news/18/04995/?ST=nxt_thmit_security

JVNVU#97735735 Cisco トラストアンカーモジュール (TAm) におけるコード検証不備および Cisco IOS XE Web UI におけるユーザ入力検証不備の脆弱性
https://jvn.jp/vu/JVNVU97735735/