6日 金曜日、先勝

+ CESA-2020:0702 Important CentOS 6 xerces-c Security Update
https://lwn.net/Articles/813881/

+ CESA-2020:0703 Important CentOS 7 http-parser Security Update
https://lwn.net/Articles/813879/

+ CESA-2020:0704 Important CentOS 7 xerces-c Security Update
https://lwn.net/Articles/813880/

+ Linux kernel 5.5.8, 5.4.24, 4.19.108 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.24
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.108

+ UPDATE: Oracle Critical Patch Update Advisory - January 2020
https://www.oracle.com/security-alerts/cpujan2020.html

+ JVNVU#99700555 pppd におけるバッファオーバーフローの脆弱性
https://jvn.jp/vu/JVNVU99700555/
CVE-2020-8597

+ Exchange Control Panel Viewstate Deserialization
https://cxsecurity.com/issue/WLB-2020030021

iPhoneとiPadが障害者支援に威力、青森県の「りんご」使い方講座がユニークだ
https://xtech.nikkei.com/atcl/nxt/column/18/01222/022800003/?ST=nxt_thmit_security

新型コロナで「便乗」が新たな脅威に、便乗詐欺と便乗サイバー攻撃が次々現る
https://xtech.nikkei.com/atcl/nxt/column/18/00676/030300041/?ST=nxt_thmit_security

JR東日本「えきねっと」で3729人に不正ログイン、海外からアプリ経由で
https://xtech.nikkei.com/atcl/nxt/news/18/07231/?ST=nxt_thmit_security