6日 木曜日、先勝

+ Linux kernel 5.4.18, 4.19.102, 4.14.170, 4.9.213, 4.4.213 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.18
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.102
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.170
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.213
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.213

+ ClamAV 0.102.2 security patch released
https://blog.clamav.net/2020/02/clamav-01022-security-patch-released.html
CVE-2020-3123

+ JVN#52486659 Ghostscript におけるアクセス制限回避の脆弱性
http://jvn.jp/jp/JVN52486659/index.html
CVE-2019-14869

+ Squidの複数の脆弱性情報(Important: CVE-2020-8450, CVE-2019-8517, Moderate: CVE-2019-12528, CVE-2020-8449)と新バージョン(4.10)
https://security.sios.com/vulnerability/squid-security-vulnerability-20200206.html
CVE-2020-8450
CVE-2019-8517
CVE-2019-12528
CVE-2020-8449

+ Sudo 1.8.25p Buffer Overflow
https://cxsecurity.com/issue/WLB-2020020018
CVE-2019-18634

VU#261385 Cisco Discovery Protocol (CDP) enabled devices are vulnerable to denial-of-service and remote code execution
https://www.kb.cert.org/vuls/id/261385/

ニュース＆リポート
三菱電機から個人情報など漏洩、8千人分、対策ソフトに「穴」
https://tech.nikkeibp.co.jp/atcl/nxt/mag/nc/18/020800017/013000324/?ST=nxt_thmit_security