14日 水曜日、仏滅

+ RHSA-2021:2683 Important: xstream security update

https://access.redhat.com/errata/RHSA-2021:2683

CVE-2021-29505

+ Mozilla Firefox 90.0 released

https://www.mozilla.org/en-US/firefox/90.0/releasenotes/

+ Mozilla Foundation Security Advisory 2021-28 Security Vulnerabilities fixed in Firefox 90

https://www.mozilla.org/en-US/security/advisories/mfsa2021-28/

CVE-2021-29970

CVE-2021-29971

CVE-2021-30547

CVE-2021-29972

CVE-2021-29973

CVE-2021-29974

CVE-2021-29975

CVE-2021-29976

CVE-2021-29977

+ Mozilla Thunderbird 78.12.0 released

https://www.thunderbird.net/en-US/thunderbird/78.12.0/releasenotes/

+ Mozilla Foundation Security Advisory 2021-30 Security Vulnerabilities fixed in Thunderbird 78.12

https://www.mozilla.org/en-US/security/advisories/mfsa2021-30/

CVE-2021-29969

CVE-2021-29970

CVE-2021-30547

CVE-2021-29976

+ Samba 4.14.6 Available for Download

https://www.samba.org/samba/history/samba-4.14.6.html

+ 2021 年 7 月のセキュリティ更新プログラム

https://msrc.microsoft.com/update-guide/releaseNote/2021-Jul

+ VMSA-2021-0015 VMware ThinApp update addresses a DLL hijacking vulnerability (CVE-2021-22000)

https://www.vmware.com/security/advisories/VMSA-2021-0015.html

CVE-2021-22000

+ VMSA-2021-0014 VMware ESXi updates address authentication and denial of service vulnerabilities (CVE-2021-21994, CVE-2021-21995)

https://www.vmware.com/security/advisories/VMSA-2021-0014.html

CVE-2021-21994

CVE-2021-21995

+ Apache Ant 1.9.16 and 1.10.11 Released

http://ant.apache.org/antnews.html

+ Security updates available for Dimension | APSB21-40

https://helpx.adobe.com/security/products/dimension/apsb21-40.html

CVE-2021-28595

+ Security Updates Available for Adobe Illustrator | APSB21-42

https://helpx.adobe.com/security/products/illustrator/apsb21-42.html

CVE-2021-28593

CVE-2021-28591

CVE-2021-28592

+ Security Updates Available for Adobe Framemaker | APSB21-45

https://helpx.adobe.com/security/products/framemaker/apsb21-45.html

CVE-2021-28596

+ Security?update available ?for Adobe Acrobat and Reader | APSB21-51

https://helpx.adobe.com/security/products/acrobat/apsb21-51.html

CVE-2021-35988

CVE-2021-35987

CVE-2021-35980

CVE-2021-28644

CVE-2021-28640

CVE-2021-28641

CVE-2021-28639

CVE-2021-28642

CVE-2021-28637

CVE-2021-35986

CVE-2021-28638

CVE-2021-35985

CVE-2021-35984

CVE-2021-28636

CVE-2021-28634

CVE-2021-35983

CVE-2021-35981

CVE-2021-28635

+ Security Updates Available for Adobe Bridge | APSB21-53

https://helpx.adobe.com/security/products/bridge/apsb21-53.html

CVE-2021-28624

CVE-2021-35992

CVE-2021-35991

CVE-2021-35989

CVE-2021-35990

+ JVNVU#91880022 Apache Tomcatにおける複数の脆弱性

http://jvn.jp/vu/JVNVU91880022/index.html

CVE-2021-33037

CVE-2021-30640

CVE-2021-30639

+ Apache Tomcatの複数の脆弱性情報(Important: CVE-2021-30639, CVE-2021-33037, Low: CVE-2021-30640 )

https://security.sios.com/vulnerability/tomcat-security-vulnerability-20210714.html

CVE-2021-30639

CVE-2021-33037

CVE-2021-30640

New Main & Daily CVD's are incoming

https://blog.clamav.net/2021/07/new-main-daily-cvds-are-incoming.html

テレワークの守り方

紛らわしい「パブリック」と「プライベート」、テレワークでのネット設定の落とし穴

https://xtech.nikkei.com/atcl/nxt/column/18/01714/070600003/?ST=nxt_thmit_security

勝村幸博の「今日も誰かが狙われる」

またもや猛威を振るう「不在通知SMS」、運転免許証を狙う新手口にだまされるな

https://xtech.nikkei.com/atcl/nxt/column/18/00676/071000083/?ST=nxt_thmit_security

コスモス薬品のオンライン店、クレジットカード情報2万5000件流出の恐れ

https://xtech.nikkei.com/atcl/nxt/news/18/10790/?ST=nxt_thmit_security

JVN#26891339 スマートフォンアプリ「Retty」における複数の脆弱性

http://jvn.jp/jp/JVN26891339/index.html