18日 水曜日、先勝

+ About the security content of iTunes 12.11 for Windows

https://support.apple.com/ja-jp/HT211933

CVE-2020-10002

CVE-2020-27912

CVE-2020-27917

CVE-2020-27911

CVE-2020-27918

CVE-2020-27895

+ Google Chrome 87.0.4280.66 released

https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html

+ Mozilla Firefox 83.0 released

https://www.mozilla.org/en-US/firefox/83.0/releasenotes/

+ Mozilla Foundation Security Advisory 2020-50 Security Vulnerabilities fixed in Firefox 83

https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/

CVE-2020-26951

CVE-2020-26952

CVE-2020-16012

CVE-2020-26953

CVE-2020-26954

CVE-2020-26955

CVE-2020-26956

CVE-2020-26957

CVE-2020-26958

CVE-2020-26959

CVE-2020-26960

CVE-2020-15999

CVE-2020-26961

CVE-2020-26962

CVE-2020-26963

CVE-2020-26964

CVE-2020-26965

CVE-2020-26966

CVE-2020-26967

CVE-2020-26968

CVE-2020-26969

+ Mozilla Foundation Security Advisory 2020-52 Security Vulnerabilities fixed in Thunderbird 78.5

https://www.mozilla.org/en-US/security/advisories/mfsa2020-52/

CVE-2020-26951

CVE-2020-16012

CVE-2020-26953

CVE-2020-26956

CVE-2020-26958

CVE-2020-26959

CVE-2020-26960

CVE-2020-15999

CVE-2020-26961

CVE-2020-26965

CVE-2020-26966

CVE-2020-26968

+ UPDATE: Oracle Critical Patch Update Advisory - October 2020

https://www.oracle.com/security-alerts/cpuoct2020.html

+ 2020 年 11 月のセキュリティ更新プログラム

https://msrc.microsoft.com/update-guide/releaseNote/2020-Nov

+ GnuPG 2.2.24 released

https://lists.gnupg.org/pipermail/gnupg-announce/2020q4/000449.html

+ Apache Struts 2.5.20 Double OGNL evaluation

https://cxsecurity.com/issue/WLB-2020110136

CVE-2019-0230

CVE-2020-0230

Announcing RHEL for the Edge

https://access.redhat.com/announcements/5580401

iPhoneに「ウイルス感染」の警告を表示、だましの手口を知らず慌てると窮地に

https://xtech.nikkei.com/atcl/nxt/column/18/00676/111400064/?ST=nxt_thmit_security

バイデン政権発足で「ファーウェイ排除」はどうなる、日本も蚊帳の外ではない

https://xtech.nikkei.com/atcl/nxt/column/18/01474/111700003/?ST=nxt_thmit_security

JVNVU#99880454 KonaWiki3 における複数の脆弱性

http://jvn.jp/vu/JVNVU99880454/index.html