15日 水曜日、友引

+ RHSA-2020:0111 Critical: firefox security update
https://access.redhat.com/errata/RHSA-2020:0111
CVE-2019-17016
CVE-2019-17017
CVE-2019-17022
CVE-2019-17024
CVE-2019-17026

+ Security Updates Available for Adobe Illustrator CC | APSB20-03
https://helpx.adobe.com/security/products/illustrator/apsb20-03.html
CVE-2020-3710
CVE-2020-3711
CVE-2020-3712
CVE-2020-3713
CVE-2020-3714

+ Security updates available for Adobe Experience Manager | APSB20-01
https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE-2019-16466
CVE-2019-16467
CVE-2019-16468
CVE-2019-16469

+ VU#335217 Multiple caching service providers are vulnerable to HTTP cache poisoning
https://www.kb.cert.org/vuls/id/335217/

+ VU#491944 Microsoft Windows Remote Desktop Gateway allows for unauthenticated remote code execution
https://www.kb.cert.org/vuls/id/491944/
CVE-2020-0609
CVE-2020-0610

+ VU#849224 Microsoft Windows CryptoAPI fails to properly validate ECC certificate chains
https://www.kb.cert.org/vuls/id/849224/
CVE-2020-0601

+ Linux kernel 5.4.12, 4.19.96, 4.14.165, 4.9.210, 4.4.210 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.12
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.96
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.165
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.210
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.210

+ Oracle Critical Patch Update Advisory - January 2020
https://www.oracle.com/security-alerts/cpujan2020.html

+ VMSA-2020-0002 VMware Tools workaround addresses a local privilege escalation vulnerability (CVE-2020-3941)
https://www.vmware.com/security/advisories/VMSA-2020-0002.html
CVE-2020-3941

ニュース解説
アマゾンが顔認証ベースの監視リスト構築を計画していた、内部文書で判明
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/00001/03473/?ST=nxt_thmit_security

勝村幸博の「今日も誰かが狙われる」
「AIセキュリティー」は万全ではない、過度な期待は禁物と肝に銘じるべき理由
https://tech.nikkeibp.co.jp/atcl/nxt/column/18/00676/010900036/?ST=nxt_thmit_security

「宅ふぁいる便」が2020年3月で終了、顧客情報流出後に再開できず
https://tech.nikkeibp.co.jp/atcl/nxt/news/18/06836/?ST=nxt_thmit_security