19日 木曜日、赤口

+ RHSA-2021:3160 Important: thunderbird security update

https://access.redhat.com/errata/RHSA-2021:3160

CVE-2021-29980

CVE-2021-29984

CVE-2021-29985

CVE-2021-29986

CVE-2021-29988

CVE-2021-29989

+ RHSA-2021:3154 Important: firefox security update

https://access.redhat.com/errata/RHSA-2021:3154

CVE-2021-29980

CVE-2021-29984

CVE-2021-29985

CVE-2021-29986

CVE-2021-29988

CVE-2021-29989

+ RHSA-2021:3157 Important: firefox security update

https://access.redhat.com/errata/RHSA-2021:3157

CVE-2021-29980

CVE-2021-29984

CVE-2021-29985

CVE-2021-29986

CVE-2021-29988

CVE-2021-29989

+ RHSA-2021:3155 Important: thunderbird security update

https://access.redhat.com/errata/RHSA-2021:3155

CVE-2021-29980

CVE-2021-29984

CVE-2021-29985

CVE-2021-29986

CVE-2021-29988

CVE-2021-29989

+ RHSA-2021:3153 Important: compat-exiv2-026 security update

https://access.redhat.com/errata/RHSA-2021:3153

CVE-2021-31291

+ RHSA-2021:3152 Important: exiv2 security update

https://access.redhat.com/errata/RHSA-2021:3152

CVE-2021-31291

+ RHSA-2021:3151 Important: sssd security update

https://access.redhat.com/errata/RHSA-2021:3151

CVE-2021-3621

+ ISC BIND 9.17.17, 9.16.20, 9.11.35 released

https://downloads.isc.org/isc/bind9/9.17.17/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.16.20/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.11.35/RELEASE-NOTES-bind-9.11.35.html

+ Linux kernel 5.13.12, 5.10.60, 5.4.142 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.12

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.60

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.142

+ OpenLDAP 2.5.7 released

https://www.openldap.org/software/release/changes.html

+ BIND 9の脆弱性情報(High: CVE-2021-25218)と新バージョン(9.11.35, 9.16.20, 9.17.17 )

https://security.sios.com/vulnerability/bind-security-vulnerability-20210819.html

CVE-2021-25218

Minutes for CentOS Board of Directors for 2021-08-11

https://blog.centos.org/2021/08/minutes-for-centos-board-of-directors-for-2021-08-11/?utm_source=rss&utm_medium=rss&utm_campaign=minutes-for-centos-board-of-directors-for-2021-08-11

Books

ビジネスに必携の法務書『データ戦略と法律　攻めのビジネスQ＆A　改訂版』

https://xtech.nikkei.com/atcl/nxt/column/18/01687/00022/?ST=nxt_thmit_security

ニップンのシステム障害で情報流出の可能性、決算発表も延期

https://xtech.nikkei.com/atcl/nxt/news/18/11016/?ST=nxt_thmit_security

JVNVU#90091573 トレンドマイクロ製企業向けエンドポイントセキュリティ製品における不適切なパーミッションの割り当ての脆弱性

http://jvn.jp/vu/JVNVU90091573/index.html

JVNVU#92334702 ThroughTek製Kalay P2P SDKにおけるアクセス制限不備の脆弱性

http://jvn.jp/vu/JVNVU92334702/index.html

JVNVU#97362937 Advantech製WebAccess/NMSにおける認証不備の脆弱性

http://jvn.jp/vu/JVNVU97362937/index.html

JVNVU#96999992 xArrow Software製xArrowにおける複数の脆弱性

http://jvn.jp/vu/JVNVU96999992/index.html

JVNVU#90467655 複数の RTOS やライブラリなどにメモリ割り当て処理における脆弱性 ("BadAlloc")

http://jvn.jp/vu/JVNVU90467655/index.html