20日 火曜日、赤口

+ RHSA-2020:4272 Moderate: nodejs:12 security and bug fix update

https://access.redhat.com/errata/RHSA-2020:4272

CVE-2020-8116

CVE-2020-8201

CVE-2020-8252

CVE-2020-15095

+ Mozilla Firefox 81.0.2 released

https://www.mozilla.org/en-US/firefox/81.0.2/releasenotes/

+ WinSCP 5.17.8 released

https://ja.osdn.net/projects/sfnet_winscp/downloads/WinSCP/5.17.8/WinSCP-5.17.8-ReadMe.txt/

+ Mozilla Thunderbird 78.3.3 released

https://www.thunderbird.net/en-US/thunderbird/78.3.3/releasenotes/

+ Linux kernel 5.9.1, 5.8.16, 5.4.72, 4.19.152, 4.14.202, 4.9.240, 4.4.240 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.1

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.16

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.72

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.152

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.202

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.240

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.240

+ VMSA-2020-0022 VMware Horizon Client update addresses a denial-of-service vulnerability (CVE-2020-3991)

https://www.vmware.com/security/advisories/VMSA-2020-0022.html

CVE-2020-3991

+ MySQL 8.0.22, 5.7.32, 5.6.50 released

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-22.html

https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-32.html

https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-50.html

+ Linux Kernelのbpfでの脆弱性情報(Moderate: CVE-2020-27194)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20201020.html

CVE-2020-27194

CPE Q3 Achievements 2020

https://blog.centos.org/2020/10/cpe-q3-achievements-2020/

JVNVU#97695305 Advantech 製 WebAccess/SCADA にファイル名やパス名の外部制御の脆弱性

http://jvn.jp/vu/JVNVU97695305/index.html

JVNVU#93185015 Advantech 製 R-SeeNet に SQL インジェクションの脆弱性

http://jvn.jp/vu/JVNVU93185015/index.html

あなたはカモリストに載っていないか、不審な国際電話は詐欺の可能性

https://xtech.nikkei.com/atcl/nxt/column/18/00138/101300649/?ST=nxt_thmit_security

攻撃者の要求に応じなかったランサムウエア感染の建設会社、その被害の全容

https://xtech.nikkei.com/atcl/nxt/column/18/00598/082600084/?ST=nxt_thmit_security