23日 月曜日、先勝

+ RHSA-2019:4326 Important: fribidi security update
https://access.redhat.com/errata/RHSA-2019:4326
CVE-2019-18397

+ RHSA-2019:4356 Important: git security update
https://access.redhat.com/errata/RHSA-2019:4356
CVE-2019-1348
CVE-2019-1349
CVE-2019-1352
CVE-2019-1387

+ Vim 8.2 is released
https://www.vim.org/vim-8.2-released.php

+ Zabbix 3.0.29 released
https://www.zabbix.com/rn/rn3.0.29

+ Linux kernel 5.4.6. 4.19.91, 4.14.160, 4.9.207, 4.4.207 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.6
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.91
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.160
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.207
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.207

+ VMSA-2019-0023 VMware Workstation and Horizon View Agent updates address a DLL-hijacking issue (CVE-2019-5539)
https://www.vmware.com/security/advisories/VMSA-2019-0023.html
CVE-2019-5539

+ hitachi-sec-2019-131 Multiple Vulnerabilities in Hitachi Ops Center Analyzer viewpoint and Hitachi Ops Center Common Services
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-131/index.html
CVE-2019-2894
CVE-2019-2933
CVE-2019-2945
CVE-2019-2949
CVE-2019-2958
CVE-2019-2962
CVE-2019-2964
CVE-2019-2973
CVE-2019-2975
CVE-2019-2977
CVE-2019-2978
CVE-2019-2981
CVE-2019-2983
CVE-2019-2987
CVE-2019-2988
CVE-2019-2989
CVE-2019-2992
CVE-2019-2999

+ hitachi-sec-2019-130 DoS Vulnerability in Hitachi Compute Systems Manager
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-130/index.html

+ hitachi-sec-2019-129 Multiple Vulnerabilities in Hitachi Automation Director
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-129/index.html

+ hitachi-sec-2019-128 Multiple Vulnerabilities in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-128/index.html

+ hitachi-sec-2019-131 Hitachi Ops Center Analyzer viewpointおよびHitachi Ops Center Common Servicesにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2019-131/index.html
CVE-2019-2894
CVE-2019-2933
CVE-2019-2945
CVE-2019-2949
CVE-2019-2958
CVE-2019-2962
CVE-2019-2964
CVE-2019-2973
CVE-2019-2975
CVE-2019-2977
CVE-2019-2978
CVE-2019-2981
CVE-2019-2983
CVE-2019-2987
CVE-2019-2988
CVE-2019-2989
CVE-2019-2992
CVE-2019-2999

+ hitachi-sec-2019-130 Hitachi Compute Systems ManagerにおけるDoS脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2019-130/index.html

+ hitachi-sec-2019-129 Hitachi Automation Directorにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2019-129/index.html

+ hitachi-sec-2019-128 Hitachi Command Suite製品およびHitachi Infrastructure Analytics Advisorにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2019-128/index.html

+ OpenSSL 1.0.2u released
https://www.openssl.org/news/openssl-1.0.2-notes.html

+ JVNVU#95417700 複数の Apple 製品に解放済みメモリ使用 (use-after-free) の脆弱性
https://jvn.jp/vu/JVNVU95417700/
CVE-2019-8900

+ UPDATE: JVNVU#90419651 OpenSSL における整数オーバーフローの脆弱性
https://jvn.jp/vu/JVNVU90419651/

JVNDB-2019-000078 a-blog cms における複数の脆弱性
https://jvndb.jvn.jp/ja/contents/2019/JVNDB-2019-000078.html

JVNVU#92353788 Telos 製 Automated Message Handling System に複数の脆弱性
https://jvn.jp/vu/JVNVU92353788/

LINEヘルスケアが始動、オンライン健康相談サービスを提供開始
https://tech.nikkeibp.co.jp/atcl/nxt/news/18/06752/?ST=nxt_thmit_security

ISPを狙うランサムウエアに注意、ソフォスが2020年のサイバー脅威予測
https://tech.nikkeibp.co.jp/atcl/nxt/news/18/06757/?ST=nxt_thmit_security