4日 金曜日、先負

+ RHSA-2021:2206 Critical: firefox security update

https://access.redhat.com/errata/RHSA-2021:2206

CVE-2021-29967

+ RHSA-2021:2238 Important: polkit security update

https://access.redhat.com/errata/RHSA-2021:2238

CVE-2021-3560

+ RHSA-2021:2235 Important: pki-core:10.6 security update

https://access.redhat.com/errata/RHSA-2021:2235

CVE-2021-3551

+ RHSA-2021:2233 Critical: firefox security update

https://access.redhat.com/errata/RHSA-2021:2233

CVE-2021-29967

+ Prenotification Security Advisory ?for Adobe Acrobat and Reader | APSB21-37

https://helpx.adobe.com/security/products/acrobat/apsb21-37.html

+ Mozilla Foundation Security Advisory 2021-26 Security Vulnerabilities fixed in Thunderbird 78.11

https://www.mozilla.org/en-US/security/advisories/mfsa2021-26/

CVE-2021-29964

CVE-2021-29967

+ Linux kernel 5.12.9, 5.10.42, 5.4.124, 4.19.193, 4.14.235, 4.9.271, 4.4.271 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.9

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.124

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.193

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.235

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.271

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.271

+ CentOS Linux 8 (2105) Released

https://blog.centos.org/2021/06/centos-linux-8-2105-released/?utm_source=rss&utm_medium=rss&utm_campaign=centos-linux-8-2105-released

https://wiki.centos.org/action/show/Manuals/ReleaseNotes/CentOS8.2105?action=show&redirect=Manuals%2FReleaseNotes%2FCentOSLinux8

+ OpenLDAP 2.5.5 released

https://www.openldap.org/software/release/changes.html

+ PHP 8.0.7, 7.4.20 released

https://www.php.net/ChangeLog-8.php#8.0.7

https://www.php.net/ChangeLog-7.php#7.4.20

+ Apacheの脆弱性情報(Important: CVE-2021-31618 Moderate: CVE-2021-30641, CVE-2021-13938, Low: CVE-2021-26691 CVE-2021-26690 CVE-2020-35452 CVE-2020-13950 CVE-2019-17567 ) と修正バージョン(2.4.48)

https://security.sios.com/vulnerability/apache-security-vulnerability-20210604.html

CVE-2021-31618

CVE-2021-30641

CVE-2021-13938

CVE-2021-26691

CVE-2021-26690

CVE-2020-35452

CVE-2020-13950

CVE-2019-17567

+ PHP 8.1.0-dev User-Agentt Remote Code Execution expl

https://cxsecurity.com/issue/WLB-2021060018

LINEのアルバムは「2024年前半までに国内転移」、Keepデータは2022年前半までに

https://xtech.nikkei.com/atcl/nxt/news/18/10521/?ST=nxt_thmit_security

JVN#64064138 スマートフォンアプリ「ATOM - スマートライフ」におけるサーバ証明書の検証不備の脆弱性

http://jvn.jp/jp/JVN64064138/index.html

UPDATE: JVNVU#91051134 Siemens 製品に対するアップデート (2021年5月)

http://jvn.jp/vu/JVNVU91051134/index.html