2020年8月11日火曜日

11日 火曜日、先負

+ MantisBT 2.24.2 Released
https://mantisbt.org/blog/archives/mantisbt/665

+ RHSA-2020:3344 Important: thunderbird security update
https://access.redhat.com/errata/RHSA-2020:3344
CVE-2020-6463
CVE-2020-6514
CVE-2020-15652
CVE-2020-15659

+ RHSA-2020:3386 Important: java-1.8.0-ibm security update
https://access.redhat.com/errata/RHSA-2020:3386
CVE-2019-17639
CVE-2020-2590
CVE-2020-2601
CVE-2020-14556
CVE-2020-14577
CVE-2020-14578
CVE-2020-14579
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621

+ RHSA-2020:3385 Important: libvncserver security update
https://access.redhat.com/errata/RHSA-2020:3385
CVE-2017-18922

+ About the security content of iCloud for Windows 11.3
https://support.apple.com/ja-jp/HT211294
CVE-2020-9871
CVE-2020-9872
CVE-2020-9874
CVE-2020-9879
CVE-2020-9936
CVE-2020-9937
CVE-2020-9873
CVE-2020-9938
CVE-2020-9919
CVE-2020-9876
CVE-2020-9877
CVE-2020-9875
CVE-2020-9894
CVE-2020-9915
CVE-2020-9925
CVE-2020-9893
CVE-2020-9895
CVE-2020-9910
CVE-2020-9916
CVE-2020-9862

+ About the security content of iCloud for Windows 7.20
https://support.apple.com/ja-jp/HT211295
CVE-2020-9871
CVE-2020-9872
CVE-2020-9874
CVE-2020-9879
CVE-2020-9936
CVE-2020-9937
CVE-2020-9873
CVE-2020-9938
CVE-2020-9877
CVE-2020-9919
CVE-2020-9876
CVE-2020-9875
CVE-2020-9894
CVE-2020-9915
CVE-2020-9925
CVE-2020-9893
CVE-2020-9895
CVE-2020-9910
CVE-2020-9916
CVE-2020-9862

+ Google Chrome 84.0.4147.125 released
https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html

+ Prenotification Security Advisory for Adobe Acrobat and Reader | APSB20-48
https://helpx.adobe.com/security/products/acrobat/apsb20-48.html

+ CESA-2020:3233 Important CentOS 6 firefox Security Update
https://lwn.net/Articles/828268/

+ CESA-2020:2985 Important CentOS 6 java-1.8.0-openjdk Security Update
https://lwn.net/Articles/828271/

+ CESA-2020:2968 Important CentOS 7 java-1.8.0-openjdk Security Update
https://lwn.net/Articles/828270/

+ CESA-2020:3284 Important CentOS 6 postgresql-jdbc Security Update
https://lwn.net/Articles/828275/

+ CESA-2020:3253 Important CentOS 7 firefox Security Update
https://lwn.net/Articles/828269/

+ CESA-2020:3345 Important CentOS 6 thunderbird Security Update
https://lwn.net/Articles/828276/

+ CESA-2020:3344 Important CentOS 7 thunderbird Security Update
https://lwn.net/Articles/828277/

+ CESA-2020:3281 Important CentOS 7 libvncserver Security Update
https://lwn.net/Articles/828273/

+ CESA-2020:2969 Important CentOS 7 java-11-openjdk Security Update
https://lwn.net/Articles/828272/

+ CESA-2020:3285 Important CentOS 7 postgresql-jdbc Security Update
https://lwn.net/Articles/828274/

+ Mozilla Thunderbird 78.1.1 released
https://www.thunderbird.net/en-US/thunderbird/78.1.1/releasenotes/

+ Linux kernel 5.7.14, 5.4.57, 4.19.138, 4.14.193 released
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.14
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.57
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.138
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.193

+ glibc 2.32 relesed
https://sourceware.org/pipermail/libc-announce/2020/000029.html

+ PHP 7.4.9 Released
https://www.php.net/ChangeLog-7.php#7.4.9

+ JVNVU#98423028 トレンドマイクロ株式会社製のウイルスバスター クラウドのインストーラにおける DLL 読み込みに関する脆弱性
http://jvn.jp/vu/JVNVU98423028/index.html
CVE-2020-15602

+ JVNVU#94105662 トレンドマイクロ株式会社製のウイルスバスター クラウドのドライバに境界外読み込みの脆弱性
http://jvn.jp/vu/JVNVU94105662/index.html
CVE-2020-15603

+ Apacheの脆弱性情報(Important: CVE-2020-9490, Moderate: CVE-2020-11984, CVE-2020-11993)
https://security.sios.com/vulnerability/apache-security-vulnerability-20200808.html
CVE-2020-9490
CVE-2020-11984
CVE-2020-11993

大東建託でデータ流出、顧客が別の顧客の情報にアクセスできた理由
https://xtech.nikkei.com/atcl/nxt/column/18/00598/032700076/?ST=nxt_thmit_security

不正アクセスで漏洩なら1件でも本人に通知、法改正で増す個人情報保護の「重し」
https://xtech.nikkei.com/atcl/nxt/column/18/00989/080500032/?ST=nxt_thmit_security

日本の金融機関への「不正アクセス権」は2500ドル、闇市場の最新事情
https://xtech.nikkei.com/atcl/nxt/column/18/00001/04434/?ST=nxt_thmit_security

UPDATE: JVNVU#94736763 Treck 製 IP スタックに複数の脆弱性
http://jvn.jp/vu/JVNVU94736763/index.html

JVNVU#90924965 Advantech 製 WebAccess HMI Designer に複数の脆弱性
http://jvn.jp/vu/JVNVU90924965/index.html

JVNVU#99172970 Geutebruck 製 G-Cam および G-Code に OS コマンドインジェクションの脆弱性
http://jvn.jp/vu/JVNVU99172970/index.html

JVNVU#90331695 Delta Industrial Automation TPEditor における複数の脆弱性
http://jvn.jp/vu/JVNVU90331695/index.html

ラベル:

0 件のコメント:

コメントを投稿

登録: コメントの投稿 (Atom)