21日 月曜日、大安

+ nginx 1.19.6 released

http://nginx.org/en/CHANGES

+ CESA-2020:5453 Moderate CentOS 7 pacemaker Security Update

https://lwn.net/Articles/840709/

+ CESA-2020:5566 Important CentOS 7 openssl Security Update

https://lwn.net/Articles/840708/

+ CESA-2020:5435 Moderate CentOS 7 python-rtslib Security Update

https://lwn.net/Articles/840710/

+ CESA-2020:5434 Moderate CentOS 7 targetcli Security Update

https://lwn.net/Articles/840712/

+ CESA-2020:5443 Moderate CentOS 7 gd Security Update

https://lwn.net/Articles/840707/

+ CESA-2020:5439 Moderate CentOS 7 samba Security Update

https://lwn.net/Articles/840711/

+ sudo 1.9.4p2 released

https://www.sudo.ws/stable.html#1.9.4p2

+ VMSA-2020-0029 VMware ESXi, Workstation, Fusion and Cloud Foundation updates address a denial of service vulnerability (CVE-2020-3999)

https://www.vmware.com/security/advisories/VMSA-2020-0029.html

CVE-2020-3999

+ hitachi-sec-2020-139 Cross-site Scripting Vulnerability in Hitachi Command Suite

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-139/index.html

+ hitachi-sec-2020-139 Hitachi Command Suite製品におけるクロスサイトスクリプティングの脆弱性

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2020-139/index.html

+ Rocket.Chat Cross Site Scripting

https://cxsecurity.com/issue/WLB-2020120139

Balancing the needs around the CentOS platform

https://blog.centos.org/2020/12/balancing-the-needs-around-the-centos-platform/?utm_source=rss&utm_medium=rss&utm_campaign=balancing-the-needs-around-the-centos-platform

クラウドストレージ（Cloud Storage）

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020600009/121400077/?ST=nxt_thmit_security

自治体管理ドメイン悪用が増加　アダルト転用も新たに発覚

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/092400133/121400039/?ST=nxt_thmit_security

米国土安全保障省が緊急指令、全米揺るがした「サプライチェーン攻撃」が日本上陸か

https://xtech.nikkei.com/atcl/nxt/column/18/00001/04995/?ST=nxt_thmit_security

JVN#10100024 日本電気株式会社製ディスクアレイ管理ソフトウェアにサーバ証明書の検証不備の脆弱性

http://jvn.jp/jp/JVN10100024/index.html

JVNVU#97718282 Emerson 製 Rosemount X-STREAM に不適切な認証の脆弱性

http://jvn.jp/vu/JVNVU97718282/index.html