22日 月曜日、赤口

+ Linux kernel 4.14.185, 4.9.228, 4.4.228 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.185
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.228
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.228

+ UPDATE: Oracle Critical Patch Update Advisory - April 2020
https://www.oracle.com/security-alerts/cpuapr2020.html

+ sudo 1.9.1 1.8.31p2 released
https://www.sudo.ws/stable.html#1.9.1
https://www.sudo.ws/legacy.html#1.8.31p2

+ hitachi-sec-2020-117 Vulnerability in Cosminexus HTTP Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-117/index.html
CVE-2019-1551

+ hitachi-sec-2020-117 Cosminexus HTTP Serverにおける脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2020-117/index.html
CVE-2019-1551

+ Postfix 3.5.3, 3.4.13, 3.3.11, 3.2.16 released
http://mirror.postfix.jp/postfix-release/official/postfix-3.5.3.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-3.4.13.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-3.3.11.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-3.2.16.HISTORY

+ Windows x32-x64 MSFVenom TCP/80-4444 Remote Management Exploit
https://cxsecurity.com/issue/WLB-2020060090

JVNVU#91499991 複数の Baxter 製品に脆弱性
http://jvn.jp/vu/JVNVU91499991/index.html

JVNVU#97042917 BIOTRONIK 製 CardioMessenger II に複数の脆弱性
http://jvn.jp/vu/JVNVU97042917/index.html

JVNVU#93844395 Johnson Controls 製 exacqVision にデジタル署名の検証不備の脆弱性
http://jvn.jp/vu/JVNVU93844395/index.html

JVNVU#95379131 三菱電機製 MC Works64 および MC Works32 に複数の脆弱性
http://jvn.jp/vu/JVNVU95379131/index.html