20日 水曜日、先勝

+ RHSA-2021:0153 Moderate: dnsmasq security update

https://access.redhat.com/errata/RHSA-2021:0153

CVE-2020-25684

CVE-2020-25685

CVE-2020-25686

+ RHSA-2021:0150 Important: dnsmasq security update

https://access.redhat.com/errata/RHSA-2021:0150

CVE-2020-25681

CVE-2020-25682

CVE-2020-25683

CVE-2020-25684

CVE-2020-25685

CVE-2020-25686

CVE-2020-25687

+ Google Chrome 88.0.4324.96 released

https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html

+ VU#434904 Dnsmasq is vulnerable to memory corruption and cache poisoning

https://www.kb.cert.org/vuls/id/434904

CVE-2020-25681

CVE-2020-25682

CVE-2020-25683

CVE-2020-25684

CVE-2020-25685

CVE-2020-25686

CVE-2020-25687

+ Linux kernel 5.10.9, 5.4.91, 4.19.169 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.9

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.91

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.169

+ Oracle Critical Patch Update Advisory - January 2021

https://www.oracle.com/security-alerts/cpujan2021.html

急増する暴露型ランサムウエア　身代金支払いは無駄と言える訳

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/052100113/010800047/?ST=nxt_thmit_security

ユニクロが「UNIQLO Pay」でスマホ決済に参入、アプリのQRコード提示で決済完了

https://xtech.nikkei.com/atcl/nxt/news/18/09477/?ST=nxt_thmit_security

JVN#57544707 GROWI におけるクロスサイトスクリプティングの脆弱性

http://jvn.jp/jp/JVN57544707/index.html