12日 火曜日、先負

+ RHSA-2021:0052 Critical: firefox security update

https://access.redhat.com/errata/RHSA-2021:0052

CVE-2020-16044

+ Mozilla Foundation Security Advisory 2021-02 Security Vulnerabilities fixed in Thunderbird 78.6.1

https://www.mozilla.org/en-US/security/advisories/mfsa2021-02/

CVE-2020-16044

+ Linux kernel 5.10.6, 5.4.88, 4.19.166, 4.14.214, 4.9.250, 4.4.250 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.6

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.88

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.166

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.214

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.250

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.250

+ Sudo 1.9.5 released

https://www.sudo.ws/stable.html#1.9.5

+ Symbolic link attack in SELinux-enabled sudoedit

https://www.sudo.ws/alerts/sudoedit_selinux.html

CVE-2021-23240

JVNVU#94662375 Vital Signs Monitor VC150 における複数の脆弱性

http://jvn.jp/vu/JVNVU94662375/index.html

JVNVU#98810190 Hitachi ABB Power Grids 製 FOX615 Multiservice-Multiplexer に不適切な認証の脆弱性

http://jvn.jp/vu/JVNVU98810190/index.html

JVNVU#99473977 Eaton 製 EASYsoft に複数の脆弱性

http://jvn.jp/vu/JVNVU99473977/index.html

JVNVU#97478563 Delta Electronics CNCSoft-B における複数の脆弱性

http://jvn.jp/vu/JVNVU97478563/index.html