17日 木曜日、赤口

+ Mozilla Firefox 89.0.1 released

https://www.mozilla.org/en-US/firefox/89.0.1/releasenotes/

+ Mozilla Foundation Security Advisory 2021-27 Security Vulnerabilities fixed in Firefox 89.0.1

https://www.mozilla.org/en-US/security/advisories/mfsa2021-27/

CVE-2021-29968

+ ISC BIND 9.17.14, 9.16.17, 9.11.33 released

https://downloads.isc.org/isc/bind9/9.17.14/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.16.17/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.11.33/RELEASE-NOTES-bind-9.11.33.html

+ Linux kernel 5.12.11, 5.10.44, 5.4.126, 4.19.195, 4.14.237 4.9.273, 4.4.273 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.11

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.126

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.195

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.237

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.273

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.273

+ PostgreSQL JDBC Driver 42.2.22 Released

https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.22

JVN#57524494 複数のイーシーキューブ製 EC-CUBE 用プラグインにおける複数のクロスサイトスクリプティングの脆弱性

http://jvn.jp/jp/JVN57524494/index.html

JVNVU#91747873 ThroughTek 製 P2P SDK に重要な情報の平文での送信の脆弱性

http://jvn.jp/vu/JVNVU91747873/index.html

JVNVU#94696836 Automation Direct 製 CLICK PLC CPU Modules に複数の脆弱性

http://jvn.jp/vu/JVNVU94696836/index.html

JVNVU#96290700 OpenClinic GA に複数の脆弱性

http://jvn.jp/vu/JVNVU96290700/index.html

経産省がゼロトラストの概念取り入れた業務環境、「イケてる」作りに驚いた

https://xtech.nikkei.com/atcl/nxt/column/18/00138/061400820/?ST=nxt_thmit_security