24日 水曜日、友引

+ RHSA-2020:2643 Important: chromium-browser security update
https://access.redhat.com/errata/RHSA-2020:2643
CVE-2020-6505
CVE-2020-6506
CVE-2020-6507

+ RHSA-2020:2653 Important: docker security update
https://access.redhat.com/errata/RHSA-2020:2653
CVE-2016-8867
CVE-2020-14298
CVE-2020-14300

+ RHSA-2020:2683 Moderate: dpdk security, bug fix, and enhancement update
https://access.redhat.com/errata/RHSA-2020:2683
CVE-2020-10722
CVE-2020-10723

+ RHSA-2020:2664 Important: kernel security and bug fix update
https://access.redhat.com/errata/RHSA-2020:2664
CVE-2020-12888

+ RHSA-2020:2663 Moderate: ntp security update
https://access.redhat.com/errata/RHSA-2020:2663
CVE-2020-11868
CVE-2020-13817

+ CESA-2020:2613 Important CentOS 6 thunderbird Security Update
https://lwn.net/Articles/824239/

+ CESA-2020:2615 Important CentOS 7 thunderbird Security Update
https://lwn.net/Articles/824240/

+ NTP 4.2.8p15 released
http://archive.ntp.org/ntp4/ChangeLog-stable

JVNVU#91424496 三菱電機製 MELSEC iQ-R、iQ-F、Q、L、FX シリーズの CPU ユニットと GX Works3 および GX Works2 間の通信が平文で行われている脆弱性
http://jvn.jp/vu/JVNVU91424496/index.html

テレワーク終了で職場に戻るPC　隔離ネット狙うウイルスの標的に
https://xtech.nikkei.com/atcl/nxt/mag/nc/18/052100113/061500032/?ST=nxt_thmit_security

自治体から大量の不正メール　問い合わせフォームを悪用
https://xtech.nikkei.com/atcl/nxt/mag/nnw/18/031800050/061800016/?ST=nxt_thmit_security