10日 金曜日、友引

+ CESA-2020:1335 Important CentOS 6 telnet Security Update
https://lwn.net/Articles/817112/

+ CESA-2020:1339 Critical CentOS 6 firefox Security Update
https://lwn.net/Articles/817109/

+ CESA-2020:1349 Important CentOS 6 krb5-appl Security Update
https://lwn.net/Articles/817111/

+ CESA-2020:1331 Important CentOS 6 ipmitool Security Update
https://lwn.net/Articles/817110/

+ Wireshark 3.2.3, 3.0.10, 2.6.16 released
https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html
https://www.wireshark.org/docs/relnotes/wireshark-3.0.10.html
https://www.wireshark.org/docs/relnotes/wireshark-2.6.16.html

+ Oracle Critical Patch Update Pre-Release Announcement - April 2020
https://www.oracle.com/security-alerts/cpuapr2020.html

+ Apache Tomcat 9.0.34, 8.5.54 released
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.34_(markt)
http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.54_(markt)

+ Mozilla Thunderbird 68.7.0 released
https://www.thunderbird.net/en-US/thunderbird/68.7.0/releasenotes/

自治体のマイナンバー端末で二要素認証が形骸化、対策がおろそかになった理由
https://xtech.nikkei.com/atcl/nxt/column/18/01157/040600008/?ST=nxt_thmit_security

JVNVU#94751438 HMS Networks 製 eWON Flexy および eWON Cosy におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/vu/JVNVU94751438/index.html