8日 月曜日、友引

+ RHSA-2021:0411 Important: flatpak security update

https://access.redhat.com/errata/RHSA-2021:0411

CVE-2021-21261

+ RHSA-2021:0395 Important: RHV-H security, bug fix, enhancement update (redhat-virtualization-host) 4.3.13

https://access.redhat.com/errata/RHSA-2021:0395

CVE-2020-25684

CVE-2020-25685

CVE-2020-25686

CVE-2021-3156

+ Mozilla Firefox 85.0.1 released

https://www.mozilla.org/en-US/firefox/85.0.1/releasenotes/

+ Mozilla Foundation Security Advisory 2021-06 Security Vulnerabilities fixed in Firefox 85.0.1 and Firefox ESR 78.7.1

https://www.mozilla.org/en-US/security/advisories/mfsa2021-06/

+ Prenotification Security Advisory for Adobe Acrobat and Reader | APSB21-09

https://helpx.adobe.com/security/products/acrobat/apsb21-09.html

+ Mozilla Thunderbird 78.7.1 released

https://www.thunderbird.net/en-US/thunderbird/78.7.1/releasenotes/

+ Linux kernel 5.10.14, 5.4.96, 4.19.174, 4.14.220, 4.9.256, 4.4.256 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.14

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.96

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.174

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.220

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.256

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.256

+ hitachi-sec-2021-105 Improper access control vulnerability in JP1/IT Desktop Management 2 - Manager and JP1/NETM/Asset Information Manager

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-105/index.html

+ hitachi-sec-2021-104 Cross-site Scripting Vulnerability in Hitachi Application Server Help

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-104/index.html

+ hitachi-sec-2021-103 Vulnerability in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-103/index.html

CVE-2020-14803

+ hitachi-sec-2021-105 JP1/IT Desktop Management 2 - Manager, JP1/NETM/Asset Information Managerにおけるアクセス制御不備による脆弱性

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2021-105/index.html

+ hitachi-sec-2021-104 Hitachi Application Server ヘルプにおけるクロスサイトスクリプティングの脆弱性

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2021-104/index.html

+ hitachi-sec-2021-103 Hitachi Command Suite製品, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics AdvisorおよびHitachi Ops Center製品における脆弱性

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2021-103/index.html

CVE-2020-14803

+ JVNVU#96493147 sudo にヒープベースのバッファオーバーフローの脆弱性

http://jvn.jp/vu/JVNVU96493147/index.html

CVE-2021-3156

+ Linux Kernelの脆弱性(Important: CVE-2021-20226)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20210207.html

CVE-2021-20226

+ Linux Kernelの脆弱性(Important: CVE-2021-26708)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20210206.html

CVE-2021-26708

JVNVU#93791310 複数の Luxion 製品に脆弱性

http://jvn.jp/vu/JVNVU93791310/index.html

JVNVU#94972291 Horner Automation 製 Cscape に境界外読み取りの脆弱性

http://jvn.jp/vu/JVNVU94972291/index.html

JVN#50470170 WordPress 用プラグイン Name Directory におけるクロスサイトリクエストフォージェリの脆弱性

http://jvn.jp/jp/JVN50470170/index.html