24日 水曜日、先勝

+ RHSA-2021:0618 Important: stunnel security update

https://access.redhat.com/errata/RHSA-2021:0618

CVE-2021-20230

+ Google Chrome 88.0.4324.190 released

https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_22.html

+ Mozilla Firefox 86.0 released

https://www.mozilla.org/en-US/firefox/86.0/releasenotes/

+ Mozilla Foundation Security Advisory 2021-07 Security Vulnerabilities fixed in Firefox 86

https://www.mozilla.org/en-US/security/advisories/mfsa2021-07/

CVE-2021-23969

CVE-2021-23970

CVE-2021-23968

CVE-2021-23974

CVE-2021-23971

CVE-2021-23976

CVE-2021-23977

CVE-2021-23972

CVE-2021-23975

CVE-2021-23973

CVE-2021-23978

CVE-2021-23979

+ Zabbix 5.2.5, 5.0.9, 4.0.29 released

https://www.zabbix.com/rn/rn5.2.5

https://www.zabbix.com/rn/rn5.0.9

https://www.zabbix.com/rn/rn4.0.29

+ Mozilla Thunderbird 78.8.0 release

https://www.thunderbird.net/en-US/thunderbird/78.8.0/releasenotes/

+ Mozilla Foundation Security Advisory 2021-09 Security Vulnerabilities fixed in Thunderbird 78.8

https://www.mozilla.org/en-US/security/advisories/mfsa2021-09/

CVE-2021-23969

CVE-2021-23968

CVE-2021-23973

CVE-2021-23978

+ Linux kernel 5.11.1, 5.10.18, 5.4.100, 4.19.177, 4.14.222, 4.9.258, 4.4.258 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.1

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.18

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.100

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.177

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.222

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.258

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.258

+ stunnelの脆弱性(Important: CVE-2021-20230)

https://security.sios.com/vulnerability/stunnel-security-vulnerability-20210224.html

CVE-2021-20230

+ PostgreSQLの脆弱性情報(Low: CVE-2021-3393, CVE-2021-20229)と新バージョン(13.2, 12.6, 11.11, 10.16, 9.6.21, 9.5.25)

https://security.sios.com/vulnerability/postgresql-security-vulnerability-20210224.html

CVE-2021-3393

CVE-2021-20229

AlmaLinux 8.3 RC released

https://almalinux.org/blog/almalinux-8-3-rc-release-notes/

申請手続きで他人の情報が表示　原因はシステムの不備

https://xtech.nikkei.com/atcl/nxt/mag/nnw/18/031800050/021800024/?ST=nxt_thmit_security

水道施設に「毒混入」狙ったサイバー攻撃、お粗末すぎるセキュリティーの恐怖

https://xtech.nikkei.com/atcl/nxt/column/18/00676/021700072/?ST=nxt_thmit_security

還元率5割超のふるさと納税がごろごろ、お得な返礼品の探し方と危険な落とし穴

https://xtech.nikkei.com/atcl/nxt/column/18/00138/021800735/?ST=nxt_thmit_security

イオン銀で2000人の個人情報に不正アクセス、「クラウド型システム」の設定不備で

https://xtech.nikkei.com/atcl/nxt/news/18/09715/?ST=nxt_thmit_security