11日 水曜日、赤口

+ RHSA-2020:0779 Important: chromium-browser security update
https://access.redhat.com/errata/RHSA-2020:0779
CVE-2020-6420

+ RHSA-2020:0775 Important: qemu-kvm security update
https://access.redhat.com/errata/RHSA-2020:0775
CVE-2019-14378
CVE-2019-15890
CVE-2020-7039

+ RHSA-2020:0738 Important: chromium-browser security update
https://access.redhat.com/errata/RHSA-2020:0738
CVE-2020-6383
CVE-2020-6384
CVE-2020-6386
CVE-2020-6407
CVE-2020-6418

+ Mozilla Firefox 74.0 released
https://www.mozilla.org/en-US/firefox/74.0/releasenotes/

+ Mozilla Foundation Security Advisory 2020-08 Security Vulnerabilities fixed in Firefox 74
https://www.mozilla.org/en-US/security/advisories/mfsa2020-08/
CVE-2020-6805
CVE-2020-6806
CVE-2020-6807
CVE-2020-6808
CVE-2020-6809
CVE-2020-6810
CVE-2020-6811
CVE-2019-20503
CVE-2020-6812
CVE-2020-6813
CVE-2020-6814
CVE-2020-6815

+ Samba 4.11.7 Available for Download
https://www.samba.org/samba/history/samba-4.11.7.html

hitachi-sec-2020-107 Cross-site Scripting Vulnerability in JP1/Performance Management - Manager [Web Console]
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-107/index.html

+ hitachi-sec-2020-107 JP1/Performance Management - Manager [Web Console]におけるクロスサイトスクリプティングの脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2020-107/index.html

+ PostgreSQL JDBC Driver 42.2.11 released
https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.11

+ JVNVU#99700555 pppd におけるバッファオーバーフローの脆弱性
http://jvn.jp/vu/JVNVU99700555/index.html

プロフェッショナルのチームを作る　社内外と「協働」して人材育成
［最終回］
https://xtech.nikkei.com/atcl/nxt/mag/nc/18/102100136/030600006/?ST=nxt_thmit_security

3分でわかる AES
https://xtech.nikkei.com/atcl/nxt/keyword/18/00002/030800119/?ST=nxt_thmit_security

米グーグルはテレワークでVPNを使わない、なぜなら「あれ」が危険だから
https://xtech.nikkei.com/atcl/nxt/column/18/00692/031000023/?ST=nxt_thmit_security