15日 木曜日、赤口

+ RHSA-2021:1206 Important: gnutls and nettle security update

https://access.redhat.com/errata/RHSA-2021:1206

CVE-2021-20305

+ RHSA-2021:1197 Important: libldb security update

https://access.redhat.com/errata/RHSA-2021:1197

CVE-2021-20277

+ RHSA-2021:1193 Moderate: thunderbird security update

https://access.redhat.com/errata/RHSA-2021:1193

CVE-2021-23991

CVE-2021-23992

CVE-2021-23993

+ RHSA-2021:1203 Important: Red Hat JBoss Web Server 3.1 Service Pack 12 security update

https://access.redhat.com/errata/RHSA-2021:1203

CVE-2021-3449

CVE-2021-3450

+ RHSA-2021:1202 Important: Red Hat JBoss Web Server 3.1 Service Pack 12 security update

https://access.redhat.com/errata/RHSA-2021:1202

CVE-2021-3449

CVE-2021-3450

+ RHSA-2021:1200 Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update

https://access.redhat.com/errata/RHSA-2021:1200

CVE-2021-3449

CVE-2021-3450

+ RHSA-2021:1199 Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update

https://access.redhat.com/errata/RHSA-2021:1199

CVE-2021-3449

CVE-2021-3450

+ RHSA-2021:1196 Important: Red Hat JBoss Web Server 5.4.2 Security Update

https://access.redhat.com/errata/RHSA-2021:1196

CVE-2021-3449

CVE-2021-3450

+ RHSA-2021:1195 Important: Red Hat JBoss Web Server 5.4.2 Security Update

https://access.redhat.com/errata/RHSA-2021:1195

CVE-2021-3449

CVE-2021-3450

+ About the security content of GarageBand 10.4.3

https://support.apple.com/ja-jp/HT212299

CVE-2021-30654

+ Google Chrome 90.0.4430.72 released

https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html

+ CESA-2021:0742 Important CentOS 7 screen Security Update

https://lwn.net/Articles/852599/

+ curl 7.76.1 released

https://curl.se/changes.html#7_76_1

+ Linux kernel 5.11.14, 5.10.30, 5.4.112, 4.19.187 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.14

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.112

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.187

+ Kubernetes(kube-apiserver) の脆弱性情報(Meduim: CVE-2021-25735)

https://security.sios.com/vulnerability/kubernetes-security-vulnerability-20210415.html

CVE-2021-25735

LINE問題で広がる「誤解」　検証すべきはデータガバナンス

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020800017/040700526/?ST=nxt_thmit_security

SCSK元社員が逮捕　松井証券口座から2億円窃取

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020800017/040700528/?ST=nxt_thmit_security

GIGAスクールも攻撃の標的に　世界で情報窃取や身代金の被害

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020800017/040700529/?ST=nxt_thmit_security

Webサイトのリスクを「過小評価」、小規模企業の危険な考えがIPA調査で鮮明に

https://xtech.nikkei.com/atcl/nxt/column/18/00001/05467/?ST=nxt_thmit_security

iPhoneがWi-Fiにつながらない、iOS 14の落とし穴「MACアドレスのランダム化」

https://xtech.nikkei.com/atcl/nxt/column/18/00138/040700774/?ST=nxt_thmit_security

JVNVU#92527693 Schneider Electric 製 SoMachine Basic に XML 外部実体参照 (XXE) に関する脆弱性

http://jvn.jp/vu/JVNVU92527693/index.html

JVNVU#99008843 Advantech 製 WebAccess/SCADA に重要な情報に対するアクセス権の不適切な割り当ての脆弱性

http://jvn.jp/vu/JVNVU99008843/index.html

JVN#54025691 スマートフォンアプリ「ぐるなび」におけるアクセス制限不備の脆弱性

http://jvn.jp/jp/JVN54025691/index.html

JVNVU#95356207 FATEK Automation 製 WinProladder に整数アンダーフローの脆弱性

http://jvn.jp/vu/JVNVU95356207/index.html