9日 木曜日、大安

+ RHSA-2020:2761 Important: chromium-browser security update
https://access.redhat.com/errata/RHSA-2020:2761
CVE-2020-6509

+ RHSA-2020:2852 Important: nodejs:12 security update
https://access.redhat.com/errata/RHSA-2020:2852
CVE-2020-7598
CVE-2020-8172
CVE-2020-8174
CVE-2020-11080

+ RHSA-2020:2848 Important: nodejs:10 security update
https://access.redhat.com/errata/RHSA-2020:2848
CVE-2020-7598
CVE-2020-8174
CVE-2020-11080

+ VU#290915 F5 BIG-IP contains multiple vulnerabilities including unauthenticated remote command execution
https://www.kb.cert.org/vuls/id/290915
CVE-2020-5902
CVE-2020-5903
CVE-2020-5904
CVE-2020-5905
CVE-2020-5906
CVE-2020-5907
CVE-2020-5908

+ FreeBSD-SA-20:20.ipv6 IPv6 socket option race condition and use after fre
https://www.freebsd.org/security/advisories/FreeBSD-SA-20:20.ipv6.asc
CVE-2020-7457

+ FreeBSD-SA-20:19.unbound Multiple vulnerabilities in unbound
https://www.freebsd.org/security/advisories/FreeBSD-SA-20:19.unbound.asc
CVE-2020-12662
CVE-2020-12663

+ FreeBSD-SA-20:18.posix_spawnp posix_spawnp(3) buffer overflow
https://www.freebsd.org/security/advisories/FreeBSD-SA-20:18.posix_spawnp.asc
CVE-2020-7458

JVNVU#91070438 Grundfos 製 CIM 500 に複数の脆弱性
http://jvn.jp/vu/JVNVU91070438/index.html

UPDATE: JVNVU#95413676 三菱電機製 GOT2000 シリーズの TCP/IP 機能における複数の脆弱性
http://jvn.jp/vu/JVNVU95413676/index.html

「ISO 21434」の衝撃、クルマに迫るサイバー攻撃対策
ヴィッツ先進CPS技術開発部の杉山歩氏に聞く
https://xtech.nikkei.com/atcl/nxt/column/18/00001/04291/?ST=nxt_thmit_security

厚労省の通信工事情報も漏洩の可能性、NTTコムへのサイバー攻撃で
https://xtech.nikkei.com/atcl/nxt/news/18/08315/?ST=nxt_thmit_security