24日 木曜日、仏滅

+ RHSA-2019:3193 Critical: firefox security update
https://access.redhat.com/errata/RHSA-2019:3193
CVE-2019-11757
CVE-2019-11758
CVE-2019-11759
CVE-2019-11760
CVE-2019-11761
CVE-2019-11762
CVE-2019-11763
CVE-2019-11764

+ RHSA-2019:2893 Important: httpd:2.4 security update
https://access.redhat.com/errata/RHSA-2019:2893
CVE-2019-9517

+ CESA-2019:3157 Moderate CentOS 7 java-1.7.0-openjdk Security Update
https://lwn.net/Articles/802923/

+ CESA-2019:3128 Important CentOS 7 java-1.8.0-openjdk Security Update
https://lwn.net/Articles/802924/

+ CESA-2019:2964 Important CentOS 7 patch Security Update
https://lwn.net/Articles/802927/

+ CESA-2019:3127 Important CentOS 7 java-11-openjdk Security Update
https://lwn.net/Articles/802926/

+ CESA-2019:3136 Important CentOS 6 java-1.8.0-openjdk Security Update
https://lwn.net/Articles/802925/

+ CESA-2019:3158 Moderate CentOS 6 java-1.7.0-openjdk Security Update
https://lwn.net/Articles/802922/

+ Mozilla Thunderbird 68.2.0 released
https://www.thunderbird.net/en-US/thunderbird/68.2.0/releasenotes/

+ Wireshark 3.0.6, 2.6.12 released
https://www.wireshark.org/docs/relnotes/wireshark-3.0.6.html
https://www.wireshark.org/docs/relnotes/wireshark-2.6.12.html

+ Oracle Critical Patch Update Advisory - October 2019
https://www.oracle.com/security-alerts/cpuoct2019.html

+ VU#766427 Multiple D-Link routers vulnerable to remote command execution
https://www.kb.cert.org/vuls/id/766427/
CVE-2019-16920

JVN#34634458 PowerCMS におけるオープンリダイレクトの脆弱性
https://jvn.jp/jp/JVN34634458/

MUFGの挑戦から学ぶ　セキュリティーリスク管理術
グローバルSOCで高度な監視　10年間の歩みを振り返る
［第1回］
https://tech.nikkeibp.co.jp/atcl/nxt/mag/nc/18/102100136/102100001/?ST=nxt_thmit_security

piyokangoの月刊システムトラブル
信頼の政府系ドメインにフィッシングサイト設置か
https://tech.nikkeibp.co.jp/atcl/nxt/mag/nnw/18/031800050/102100008/?ST=nxt_thmit_security