7日 水曜日、仏滅

+ RHSA-2020:4080 Important: firefox security and bug fix update

https://access.redhat.com/errata/RHSA-2020:4080

CVE-2020-12422

CVE-2020-12424

CVE-2020-12425

CVE-2020-15648

CVE-2020-15653

CVE-2020-15654

CVE-2020-15656

CVE-2020-15658

CVE-2020-15673

CVE-2020-15676

CVE-2020-15677

CVE-2020-15678

+ Google Chrome 86.0.4240.75 released

https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html

+ Mozilla Firefox 81.0.1 released

https://www.mozilla.org/en-US/firefox/81.0.1/releasenotes/

+ About the security content of macOS 10.14.6 Supplemental Update

https://support.apple.com/ja-jp/HT211872

+ Linux kernel 5.8.13, 5.4.69, 4.19.149, 4.14.200, 4.9.238, 4.4.238 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.13

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.69

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.149

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.200

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.238

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.238

+ Samba 4.11.14 Available for Download

https://www.samba.org/samba/history/samba-4.11.14.html

+ PHP 7.4.11, 7.3.23, 7.2.34 released

https://www.php.net/ChangeLog-7.php#7.4.11

https://www.php.net/ChangeLog-7.php#7.3.23

https://www.php.net/ChangeLog-7.php#7.2.34

+ JVNVU#95014999 トレンドマイクロ株式会社製ウイルスバスター for Mac に権限昇格の脆弱性

http://jvn.jp/vu/JVNVU95014999/index.html

CVE-2020-25776

+ UPDATE: VNVU#95778184 Microsoft Windows Netlogon Remote Protocol (MS-NRPC) に権限昇格の脆弱性

http://jvn.jp/vu/JVNVU95778184/index.html

JVN#82892096 複数のエレコム製 LAN ルーターにおける OS コマンドインジェクションの脆弱性

http://jvn.jp/jp/JVN82892096/index.html

UPDATE: JVNVU#94736763 Treck 製 IP スタックに複数の脆弱性

http://jvn.jp/vu/JVNVU94736763/index.html

UPDATE: JVNVU#90224831 複数の三菱電機製 FA 製品における複数の脆弱性

http://jvn.jp/vu/JVNVU90224831/index.html