25日 月曜日、赤口

+ RHSA-2020:2250 Important: dotnet3.1 security update
https://access.redhat.com/errata/RHSA-2020:2250
CVE-2020-1108
CVE-2020-1161

+ CESA-2020:2036 Critical CentOS 6 firefox Security Update
https://lwn.net/Articles/821182/

+ CESA-2020:2050 Critical CentOS 7 thunderbird Security Update
https://lwn.net/Articles/821188/

+ CESA-2020:2040 Important CentOS 7 squid Security Update
https://lwn.net/Articles/821186/

+ CESA-2020:2037 Critical CentOS 7 firefox Security Update
https://lwn.net/Articles/821183/

+ CESA-2020:0984 Important CentOS 7 ipmitool Security Update
https://lwn.net/Articles/821184/

+ CESA-2020:2103 Important CentOS 6 kernel Security Update
https://lwn.net/Articles/821185/

+ CESA-2020:2049 Critical CentOS 6 thunderbird Security Update
https://lwn.net/Articles/821187/

+ Mozilla Thunderbird 68.8.1 released
https://www.thunderbird.net/en-US/thunderbird/68.8.1/releasenotes/

+ Linux kernel 3.16.84 released
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.84

+ hitachi-sec-2020-114 Privilege escalation vulnerability in Hitachi Ops Center Common Services
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-114/index.html

+ hitachi-sec-2020-114 Hitachi Ops Center Common Servicesにおける特権昇格の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2020-114/index.html

JVNVU#92478269 Schneider Electric 製 EcoStruxure Operator Terminal Expert に複数の脆弱性
http://jvn.jp/vu/JVNVU92478269/index.html

JVNVU#91294008 複数の Johnson Controls 製品に重要な情報の平文保存に関する脆弱性
http://jvn.jp/vu/JVNVU91294008/index.html

国内のサイトから情報流出　ネット上で販売される
https://xtech.nikkei.com/atcl/nxt/mag/nnw/18/031800050/051900015/?ST=nxt_thmit_security

新型コロナで増えるサイバー攻撃、マイクロソフトははやりの「あれ」で対抗
https://xtech.nikkei.com/atcl/nxt/column/18/00001/04064/?ST=nxt_thmit_security