10日 火曜日、先負

+ RHSA-2021:3027 Important: microcode_ctl security, bug fix and enhancement update

https://access.redhat.com/errata/RHSA-2021:3027

CVE-2020-0543

CVE-2020-0548

CVE-2020-0549

CVE-2020-8695

CVE-2020-8696

CVE-2020-8698

CVE-2020-24489

CVE-2020-24511

CVE-2020-24512

+ VU#357312 HTTP Request Smuggling in Web Proxies

https://www.kb.cert.org/vuls/id/357312

+ Linux kernel 5.13.9, 5.10.57, 5.4.139, 4.19.202, 4.14.243, 4.9.279, 4.4.279 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.9

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.57

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.139

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.202

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.243

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.279

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.279

+ vsftpd 3.0.4, 3.0.5 released

https://security.appspot.com/vsftpd.html

+ Tomcat 10.0.10, 9.0.52 Released

http://tomcat.apache.org/tomcat-10.0-doc/changelog.html#Tomcat_10.0.10_(markt)

http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.52_(remm)

+ Linux Kernelの脆弱性(Moderate: CVE-2021-3655)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20210809.html

CVE-2021-3655

JVNVU#99370832 FATEK Automation製FvDesignerに複数の脆弱性

http://jvn.jp/vu/JVNVU99370832/index.html

JVNVU#94730303 mySCADA製myPROに複数の脆弱性

http://jvn.jp/vu/JVNVU94730303/index.html

JVNVU#92588420 Advantech製WebAccess/SCADAにおける複数の脆弱性

http://jvn.jp/vu/JVNVU92588420/index.html

ニップンがサイバー攻撃受けシステム障害、2021年4～6月期決算発表を延期

https://xtech.nikkei.com/atcl/nxt/news/18/10966/?ST=nxt_thmit_security