14日 月曜日、先負

+ Windows DNSに関するセキュリティアドバイザリが公開されました

https://jprs.jp/tech/security/2020-12-11-windowsdnsresolver.html

+ Linux kernel 5.9.14, 5.4.83, 4.19.163, 4.14.212, 4.9.248, 4.4.248 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.14

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.83

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.163

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.212

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.248

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.248

+ Kubernetesのsecretが漏洩するという複数の脆弱性情報(Moderate: CVE-2020-8563, CVE-2020-8564,CVE-2020-8565,CVE-2020-8566)

https://security.sios.com/vulnerability/kubernetes-security-vulnerability-20201213.html

CVE-2020-8563

CVE-2020-8564

CVE-2020-8565

CVE-2020-8566

+ OpenLDAPの脆弱性情報(Moderate: CVE-2020-25692)

https://security.sios.com/vulnerability/openldap-security-vulnerability-20201213.html

CVE-2020-25692

+ Linux Kernelに権限昇格の脆弱性(Moderate: CVE-2020-29534)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20201214.html

CVE-2020-29534

+ Linux Kernelに権限昇格の脆弱性(Moderate: CVE-2020-14351)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20201213.html

CVE-2020-14351

How RHEL is Made

https://blog.centos.org/2020/12/how-rhel-is-made/?utm_source=rss&utm_medium=rss&utm_campaign=how-rhel-is-made

Minutes for CentOS Board of Directors for 2020-11-11

https://blog.centos.org/2020/12/minutes-for-centos-board-of-directors-for-2020-11-11/?utm_source=rss&utm_medium=rss&utm_campaign=minutes-for-centos-board-of-directors-for-2020-11-11

Minutes for CentOS Board of Directors for 2020-09-09

https://blog.centos.org/2020/12/minutes-for-centos-board-of-directors-for-2020-09-09/?utm_source=rss&utm_medium=rss&utm_campaign=minutes-for-centos-board-of-directors-for-2020-09-09

CentOS Stream is Continuous Delivery

https://blog.centos.org/2020/12/centos-stream-is-continuous-delivery/?utm_source=rss&utm_medium=rss&utm_campaign=centos-stream-is-continuous-delivery

SASE、SDP、SD-WAN、ゼロトラストで企業ネットワークはこう変わる

https://xtech.nikkei.com/atcl/nxt/column/18/01449/120900010/?ST=nxt_thmit_security

三菱パワーが不正アクセス被害を公表、日立システムズの運用監視サービス経由か

https://xtech.nikkei.com/atcl/nxt/news/18/09317/?ST=nxt_thmit_security

UPDATE: JVNVU#96491057 複数の組み込み TCP/IP スタックにメモリ管理の不備に起因する複数の脆弱性

http://jvn.jp/vu/JVNVU96491057/index.html

JVNVU#96535665 Medtronic 製 MyCareLink (MCL) Smart Model 25000 Patient Reader に複数の脆弱性

http://jvn.jp/vu/JVNVU96535665/index.html

JVNVU#98190554 Host Engineering 製 ECOM100 Module に不適切な入力検証の脆弱性

http://jvn.jp/vu/JVNVU98190554/index.html