9日 月曜日、大安

+ Knot Resolverの脆弱性情報が公開されました（CVE-2019-19331）
https://jprs.jp/tech/security/2019-12-06-knotresolver.html
CVE-2019-19331

+ OpenSSL Security Advisory [6 December 2019]
https://www.openssl.org/news/secadv/20191206.txt
CVE-2019-1551

+ VMSA-2019-0022 VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability (CVE-2019-5544)
https://www.vmware.com/security/advisories/VMSA-2019-0022.html
CVE-2019-5544

+ PostgreSQL JDBC Driver 42.2.9 released
https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.9

+ OpenSSLの脆弱性情報(Low: CVE-2019-1551)
https://security.sios.com/vulnerability/openssl-security-vulnerability-20191208.html
CVE-2019-1551

+ phpMyadminの脆弱性情報(Medium: CVE-2019-19617)
https://security.sios.com/vulnerability/phpmyadmin-security-vulnerability-20191208.html
CVE-2019-19617

+ Trend Micro Deep Security Agent 11 Arbitrary File Overwrite
https://cxsecurity.com/issue/WLB-2019120033
CVE-2019-15627

+ FireFox 71.0 dev console xss
https://cxsecurity.com/issue/WLB-2019120027

+ Windows 10 1903: Microsoft details search fix as new update bug hits
https://cxsecurity.com/issue/WLB-2019120026

「秘密計算」大解説
リクナビ問題を防ぐ「秘密計算」、データ時代の本命技術を知る
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/01130/120500001/?ST=nxt_thmit_security

象印ECサイトから個人情報28万件流出、偽の当選通知を使ってカード情報を詐取
https://tech.nikkeibp.co.jp/atcl/nxt/news/18/06649/?ST=nxt_thmit_security