5日 木曜日、先勝

+ RHSA-2019:4024 Important: SDL security update
https://access.redhat.com/errata/RHSA-2019:4024
CVE-2019-14906

+ CESA-2019:3981 Important CentOS 7 389-ds-base Security Update
https://lwn.net/Articles/806270/

+ CESA-2019:3979 Important CentOS 7 kernel Security Update
https://lwn.net/Articles/806272/

+ CESA-2019:3888 Important CentOS 7 ghostscript Security Update
https://lwn.net/Articles/806271/

+ CESA-2019:3976 Low CentOS 7 tcpdump Security Update
https://lwn.net/Articles/806273/

+ Mozilla Foundation Security Advisory 2019-38 Security Vulnerabilities fixed in - Thunderbird 68.3
https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/
CVE-2019-17008
CVE-2019-13722
CVE-2019-11745
CVE-2019-17009
CVE-2019-17010
CVE-2019-17005
CVE-2019-17011
CVE-2019-17012

+ Mozilla Thunderbird 68.3.0 released
https://www.thunderbird.net/en-US/thunderbird/68.3.0/releasenotes/

+ Wireshark 3.0.7, 2.6.13 released
https://www.wireshark.org/docs/relnotes/wireshark-3.0.7.html
https://www.wireshark.org/docs/relnotes/wireshark-2.6.13.html

+ Linux kernel 5.4.2, 5.3.15 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.2
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.15

+ Dovecot 2.3.9 released
https://dovecot.org/pipermail/dovecot-news/2019-December/000423.html

+ VMware WorkStation 12.5.5 Virtual Machine Escape
https://cxsecurity.com/issue/WLB-2019120018

さらばパスワード、FIDOの正体
iOSは「FIDO」非対応、なのにiPhoneで使える理由
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/01097/112100006/?ST=nxt_thmit_security

ニュース解説
企業のセキュリティー対策を「三つ星」評価、ミシュランのような新制度誕生へ
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/00001/03321/?ST=nxt_thmit_security