19日 火曜日、赤口

+ Apache Tomcat 7.0.104 Released
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html#Tomcat_7.0.104_(violetagg)

+ Dovecot 2.3.10.1 released
https://dovecot.org/pipermail/dovecot-news/2020-May/000437.html

+ Multiple vulnerabilities in Dovecot
https://dovecot.org/pipermail/dovecot-news/2020-May/000438.html
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967

+ dovecotの複数の脆弱性情報(CVE-2020-10957, CVE-2020-10958, CVE-2020-10967)
https://security.sios.com/vulnerability/dovecot-security-vulnerability-20200519.html
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967

VU#534195 Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks
https://www.kb.cert.org/vuls/id/534195/

VU#647177 Bluetooth devices supporting BR/EDR are vulnerable to impersonation attacks
https://www.kb.cert.org/vuls/id/647177/

UPDATE: JVNVU#95200006 Samsung Qmage codec for Android Skia library にメモリ破壊の脆弱性
http://jvn.jp/vu/JVNVU95200006/index.html

「電子署名後進国」の日本、原因はできない理由探し　先進国の優れた設計思想とは
https://xtech.nikkei.com/atcl/nxt/column/18/01272/00070/?ST=nxt_thmit_security

新型コロナで休校中の高校がアレの被害に、しかもここ半年で2度目
https://xtech.nikkei.com/atcl/nxt/column/18/00598/032700062/?ST=nxt_thmit_security

国内外で大量発生の偽サイトに驚愕、あのドメインに注意
https://xtech.nikkei.com/atcl/nxt/column/18/00138/051500546/?ST=nxt_thmit_security

ドコモ・Agoop・ヤフー、政府に提供する新型コロナ対策「統計データ」の中身とは
https://xtech.nikkei.com/atcl/nxt/column/18/01304/051800002/?ST=nxt_thmit_security