7日 木曜日、赤口

+ MantisBT 2.24.1 Released
https://mantisbt.org/blog/archives/mantisbt/661

+ RHSA-2020:2040 Important: squid security update
https://access.redhat.com/errata/RHSA-2020:2040
CVE-2019-12519
CVE-2019-12525
CVE-2020-11945

+ RHSA-2020:2037 Critical: firefox security update
https://access.redhat.com/errata/RHSA-2020:2037
CVE-2020-6831
CVE-2020-12387
CVE-2020-12392
CVE-2020-12395

+ RHSA-2020:2041 Important: squid:4 security update
https://access.redhat.com/errata/RHSA-2020:2041
CVE-2019-12519
CVE-2019-12525
CVE-2020-11945

+ Google Chrome 81.0.4044.138 released
https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop.html

+ Mozilla Firefox 76.0 released
https://www.mozilla.org/en-US/firefox/76.0/releasenotes/

+ Mozilla Foundation Security Advisory 2020-16 Security Vulnerabilities fixed in Firefox 76
https://www.mozilla.org/en-US/security/advisories/mfsa2020-16/
CVE-2020-12387
CVE-2020-12388
CVE-2020-12389
CVE-2020-6831
CVE-2020-12390
CVE-2020-12391
CVE-2020-12392
CVE-2020-12393
CVE-2020-12394
CVE-2020-12395
CVE-2020-12396

+ CESA-2020:1511 Important CentOS 7 git Security Update
https://lwn.net/Articles/819168/

+ CESA-2020:1962 Important CentOS 6 python-twisted-web Security Update
https://lwn.net/Articles/819172/

+ CESA-2020:1509 Important CentOS 7 java-11-openjdk Security Update
https://lwn.net/Articles/819171/

+ CESA-2020:1507 Important CentOS 7 java-1.7.0-openjdk Security Update
https://lwn.net/Articles/819169/

+ CESA-2020:1512 Important CentOS 7 java-1.8.0-openjdk Security Update
https://lwn.net/Articles/819170/

+ CESA-2020:1561 Important CentOS 7 python-twisted-web Security Update
https://lwn.net/Articles/819173/

+ CESA-2020:1489 Important CentOS 7 thunderbird Security Update
https://lwn.net/Articles/819174/

+ Moziila Thunderbird 68.8.0 released
https://www.thunderbird.net/en-US/thunderbird/68.8.0/releasenotes/

+ Mozilla Foundation Security Advisory 2020-18 Security Vulnerabilities fixed in Thunderbird 68.8.0
https://www.mozilla.org/en-US/security/advisories/mfsa2020-18/
CVE-2020-12397
CVE-2020-12387
CVE-2020-6831
CVE-2020-12392
CVE-2020-12393
CVE-2020-12395

+ Linux kernel 5.6.11, 5.4.39, 4.19.121, 4.14.179, 4.9.222, 4.4.222 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.11
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.39
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.121
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.179
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.222
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.222

+ UPDATE: Oracle Critical Patch Update Advisory - April 2020
https://www.oracle.com/security-alerts/cpuapr2020.html

+ Samba 4.11.9 Available for Download
https://www.samba.org/samba/history/samba-4.11.9.html

+ CentOS-7 (2003) Released
https://wiki.centos.org/action/show/Manuals/ReleaseNotes/CentOS7.2003?action=show&redirect=Manuals%2FReleaseNotes%2FCentOS7

+ Linux Kernelの複数の脆弱性情報(CVE-2020-12652, CVE-2020-12653, CVE-2020-12654, CVE-2020-12655, CVE-2020-12656, CVE-2020-12657, CVE-2020-12659)
https://security.sios.com/vulnerability/kernel-security-vulnerability-20200506.html
CVE-2020-12652
CVE-2020-12653
CVE-2020-12654
CVE-2020-12655
CVE-2020-12656
CVE-2020-12657
CVE-2020-12659

+ PHPの脆弱性情報(CVE-2020-7067)と新バージョン(7.2.30, 7.3.17, 7.4.5)
https://security.sios.com/vulnerability/php-security-vulnerability-20200503.html
CVE-2020-7067

+ Linux Kernelの複数の脆弱性情報(CVE-2020-12464, CVE-2020-12465)
https://security.sios.com/vulnerability/kernel-security-vulnerability-20200503.html
CVE-2020-12464
CVE-2020-12465

+ Sambaの複数の脆弱性情報(Medium: CVE-2020-10700, High: CVE-2020-10704)と修正バージョン(4.12.2, 4.11.8, 4.10.15)
https://security.sios.com/vulnerability/samba-security-vulnerability-20200502.html
CVE-2020-10700
CVE-2020-10704

+ OpenLDAPの脆弱性情報(CVE-2020-12243)
https://security.sios.com/vulnerability/openldap-security-vulnerability-20200502.html
CVE-2020-12243

+ Oracle Database 11g Release 2 OracleDBConsoleorcl Unquoted Service Path
https://cxsecurity.com/issue/WLB-2020050048

「自動化」で1億6000万ユーザーのセキュリティーを守る、LINEの飽くなき挑戦
https://xtech.nikkei.com/atcl/nxt/column/18/00678/041600025/?ST=nxt_thmit_security

新型コロナ便乗サイトが1日5000件、前例を見ない詐欺師たちの傾向とは
https://xtech.nikkei.com/atcl/nxt/column/18/00676/042900047/?ST=nxt_thmit_security

10万円給付どう受け取る？マイナンバーカード使うオンライン申請にアクセス殺到
https://xtech.nikkei.com/atcl/nxt/column/18/00001/03991/?ST=nxt_thmit_security