21日 木曜日、大安

+ Linux kernel 5.17.4, 5.15.35, 5.10.112, 5.4.190, 4.19.239, 4.14.276, 4.9.311 released

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.4

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.35

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.112

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.190

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.239

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.276

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.311

+ RHSA-2022:1440 Important: java-11-openjdk security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:1440

CVE-2022-21426

CVE-2022-21434

CVE-2022-21443

CVE-2022-21476

CVE-2022-21496

+ RHSA-2022:1442 Important: java-11-openjdk security update

https://access.redhat.com/errata/RHSA-2022:1442

CVE-2022-21426

CVE-2022-21434

CVE-2022-21443

CVE-2022-21476

CVE-2022-21496

+ RHSA-2022:1445 Important: java-17-openjdk security and bug fix update

https://access.redhat.com/errata/RHSA-2022:1445

CVE-2022-21426

CVE-2022-21434

CVE-2022-21443

CVE-2022-21449

CVE-2022-21476

CVE-2022-21496

+ RHSA-2022:1390 Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 security update

https://access.redhat.com/errata/RHSA-2022:1390

CVE-2021-3516

CVE-2021-3517

CVE-2021-3518

CVE-2021-3537

CVE-2021-3541

CVE-2022-0778

CVE-2022-22720

CVE-2022-23308

+ RHSA-2022:1389 Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 security update

https://access.redhat.com/errata/RHSA-2022:1389

CVE-2021-3516

CVE-2021-3517

CVE-2021-3518

CVE-2021-3537

CVE-2021-3541

CVE-2022-0778

CVE-2022-22720

CVE-2022-23308

+ RHSA-2022:1463 Low: Red Hat Single Sign-On 7.5.2 security update on RHEL 8

https://access.redhat.com/errata/RHSA-2022:1463

CVE-2021-45105

+ RHSA-2022:1462 Low: Red Hat Single Sign-On 7.5.2 security update on RHEL 7

https://access.redhat.com/errata/RHSA-2022:1462

CVE-2021-45105

+ ISC BIND 9.18.2, 9.19.0, 9.16.28 released

https://downloads.isc.org/isc/bind9/9.18.2/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.19.0/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.16.28/doc/arm/html/notes.html

+ MySQLの脆弱性(Oracle Critical Patch Update Advisory - Apr 2022)

https://security.sios.com/vulnerability/mysql-security-vulnerability-20220420.html

+ Oracle Javaの脆弱性(Oracle Critical Patch Update Advisory - Apr 2022)

https://security.sios.com/vulnerability/java-security-vulnerability-20220420.html

UPDATE: JVN#69304877 CLUSTERPRO X および EXPRESSCLUSTER X における複数の脆弱性

http://jvn.jp/jp/JVN69304877/index.html

JVNVU#90467655 複数の RTOS やライブラリなどにメモリ割り当て処理における脆弱性 ("BadAlloc")

http://jvn.jp/vu/JVNVU90467655/index.html