7日 月曜日、先勝

+ Linux kernel 5.16.7, 5.15.21, 5.10.98, 5.4.177, 4.4.302 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.7

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.21

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.98

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.177

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.302

+ hitachi-sec-2022-104 Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center

https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-104/index.html

+ hitachi-sec-2022-104 Hitachi Command Suite製品, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics AdvisorおよびHitachi Ops Center製品における複数の脆弱性

https://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2022-104/index.html

CVE-2022-21248

CVE-2022-21271

CVE-2022-21277

CVE-2022-21282

CVE-2022-21283

CVE-2022-21291

CVE-2022-21293

CVE-2022-21294

CVE-2022-21296

CVE-2022-21299

CVE-2022-21305

CVE-2022-21340

CVE-2022-21341

CVE-2022-21349

CVE-2022-21360

CVE-2022-21365

CVE-2022-21366

+ hitachi-sec-2022-103 Cross-site Scripting Vulnerability in JP1/IT Desktop Management 2

https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-103/index.html

+ hitachi-sec-2022-103 JP1/IT Desktop Management 2におけるクロスサイトスクリプティングの脆弱性

+ hitachi-sec-2022-102 Vulnerability in Cosminexus HTTP Server and Hitachi Web Server

https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-102/index.html

+ hitachi-sec-2022-102 Cosminexus HTTP ServerおよびHitachi Web Serverにおける脆弱性

CVE-2020-13938

+ Postfix stable release 3.7.0

https://www.postfix.org/announcements/postfix-3.7.0.html

http://mirror.postfix.jp/postfix-release/official/postfix-3.7.0.HISTORY

+ Postfix legacy releases 3.6.5, 3.5.15, 3.4.25, 3.3.22

http://www.postfix.org/announcements/postfix-3.6.5.html

http://mirror.postfix.jp/postfix-release/official/postfix-3.6.5.HISTORY

http://mirror.postfix.jp/postfix-release/official/postfix-3.5.15.HISTORY

http://mirror.postfix.jp/postfix-release/official/postfix-3.4.25.HISTORY

http://mirror.postfix.jp/postfix-release/official/postfix-3.3.22.HISTORY

UPDATE: JVNVU#96768815 Apache Log4jにおける任意のコードが実行可能な脆弱性

http://jvn.jp/vu/JVNVU96768815/index.html

JVNVU#91909595 Airspan Networks社の複数のMimosa製品における複数の脆弱性

http://jvn.jp/vu/JVNVU91909595/index.html

JVN#67396225 CSV+ におけるクロスサイトスクリプティングの脆弱性

http://jvn.jp/jp/JVN67396225/index.html