16日 月曜日、大安

+ MantisBT 2.24.0 and 2.23.1 Released
https://mantisbt.org/blog/archives/mantisbt/658

+ Mozilla Thunderbird 68.6.0 released
https://www.thunderbird.net/en-US/thunderbird/68.6.0/releasenotes/

+ VMware Workstation 15.5.2 Player released
https://my.vmware.com/jp/web/vmware/free#desktop_end_user_computing/vmware_workstation_player/15_0|PLAYER-1552|product_downloads

+ Sudo 1.8.31p1 released
https://www.sudo.ws/stable.html#1.8.31p1

+ Postfix legacy releases 3.4.10, 3.3.8, 3.2.13
http://www.postfix.org/announcements/postfix-3.4.10.html

+ UPDATE: JVNVU#91394194 Microsoft SMBv3 の接続処理にリモートコード実行の脆弱性
https://jvn.jp/vu/JVNVU91394194/

+ Microsoft Windows SMB 3.1.1 Remote Code Execution
https://cxsecurity.com/issue/WLB-2020030071
CVE-2020-0796

+ SQL Server Reporting Services (SSRS) ViewState Deserialization
https://cxsecurity.com/issue/WLB-2020030069

+ Microsoft Exchange 2019 15.2.221.12 Authenticated Remote Code Execution
https://cxsecurity.com/issue/WLB-2020030068
CVE-2020-0688

2019年の不正アクセス件数、64.8％増　アクセス制御の不備などが要因
https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020600010/031000057/?ST=nxt_thmit_security