21日 金曜日、大安

+ BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2019-6471）
https://jprs.jp/tech/security/2019-06-20-bind9-vuln-malformed-packets.html
CVE-2019-6471

+ RHSA-2019:1578 Moderate: libvirt security update
https://access.redhat.com/errata/RHSA-2019:1578
CVE-2019-10161

+ About the security content of AirPort Base Station Firmware Update 7.8.1
https://support.apple.com/ja-jp/HT210091
CVE-2019-8581
CVE-2019-8588
CVE-2019-8578
CVE-2018-6918
CVE-2019-8575
CVE-2019-7291
CVE-2019-8580
CVE-2019-8572

+ Mozilla Foundation Security Advisory 2019-19 Security vulnerabilities fixed in Firefox 67.0.4 and Firefox ESR 60.7.2
https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/
CVE-2019-11708

+ Mozilla Foundation Security Advisory 2019-20 Security vulnerabilities fixed in Thunderbird 60.7.2
https://www.mozilla.org/en-US/security/advisories/mfsa2019-20/
CVE-2019-11707

+ VU#905115 Multiple TCP Selective Acknowledgement (SACK) and Maximum Segment Size (MSS) networking vulnerabilities may cause denial-of-service conditions in Linux and FreeBSD kernels
https://www.kb.cert.org/vuls/id/905115/
CVE-2019-11477
CVE-2019-11478
CVE-2019-5599
CVE-2019-11479

+ Linux kernel 3.16.69 released
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.69

+ PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18, 9.4.23 released
https://www.postgresql.org/docs/11/release-11-4.html
https://www.postgresql.org/docs/10/release-10-9.html
https://www.postgresql.org/docs/9.6/release-9-6-14.html
https://www.postgresql.org/docs/9.5/release-9-5-18.html
https://www.postgresql.org/docs/9.4/release-9-4-23.html

+ hitachi-sec-2019-113 Vulnerability in Cosminexus HTTP Server and Hitachi Web Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-113/index.html
CVE-2019-0220

+ hitachi-sec-2019-112 Vulnerability in Cosminexus HTTP Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-112/index.html
CVE-2019-1559

+ hitachi-sec-2019-113 Cosminexus HTTP ServerおよびHitachi Web Serverにおける脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2019-113/index.html
CVE-2019-0220

+ hitachi-sec-2019-112 Cosminexus HTTP Serverにおける脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2019-112/index.html
CVE-2019-1559

+ PostgreSQL JDBC Driver 42.2.6 released
https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.6

+ UPDATE: JVNVU#90363752 ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性
https://jvn.jp/vu/JVNVU90363752/

ファーウェイ騒動の深層
ファーウェイ排除の死角、米国が最先端から脱落するリスクも
ファーウェイを巡る貿易摩擦の経緯と展望を国内通信業界の有識者に聞く（後編）
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/00594/061700041/?ST=nxt_thmit_security

ニュース解説
サイバー攻撃から産業機器を守れ、経産省が信頼性検証ビジネスを育成へ
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/00001/02429/?ST=nxt_thmit_security