11日 水曜日、友引

+ MantisBT 2.25.4 released

https://mantisbt.org/blog/archives/mantisbt/712

+ RHSA-2022:2120 Moderate: zsh security update

https://access.redhat.com/errata/RHSA-2022:2120

CVE-2021-45444

+ RHSA-2022:2008 Moderate: cockpit security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:2008

CVE-2021-3660

CVE-2021-3698

+ RHSA-2022:1930 Moderate: keepalived security and bug fix update

https://access.redhat.com/errata/RHSA-2022:1930

CVE-2021-44225

+ RHSA-2022:1891 Low: libpq security update

https://access.redhat.com/errata/RHSA-2022:1891

CVE-2021-23222

+ RHSA-2022:1819 Moderate: go-toolset:rhel8 security and bug fix update

https://access.redhat.com/errata/RHSA-2022:1819

CVE-2021-38297

CVE-2021-39293

CVE-2021-41771

CVE-2021-41772

CVE-2022-23772

CVE-2022-23773

CVE-2022-23806

+ RHSA-2022:1814 Low: gnome-shell security and bug fix update

https://access.redhat.com/errata/RHSA-2022:1814

CVE-2020-17489

+ RHSA-2022:1801 Moderate: gfbgraph security update

https://access.redhat.com/errata/RHSA-2022:1801

CVE-2021-39358

+ RHSA-2022:1777 Moderate: webkit2gtk3 security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:1777

CVE-2021-30809

CVE-2021-30818

CVE-2021-30823

CVE-2021-30836

CVE-2021-30846

CVE-2021-30848

CVE-2021-30849

CVE-2021-30851

CVE-2021-30884

CVE-2021-30887

CVE-2021-30888

CVE-2021-30889

CVE-2021-30890

CVE-2021-30897

CVE-2021-30934

CVE-2021-30936

CVE-2021-30951

CVE-2021-30952

CVE-2021-30953

CVE-2021-30954

CVE-2021-30984

CVE-2021-45481

CVE-2021-45482

CVE-2021-45483

CVE-2022-22589

CVE-2022-22590

CVE-2022-22592

CVE-2022-22594

CVE-2022-22620

CVE-2022-22637

+ Google Chrome 101.0.4951.64, 100.0.4896.160 released

https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html

https://chromereleases.googleblog.com/2022/05/extended-stable-channel-update-for.html

+ 2022 年 5 月のセキュリティ更新プログラム

https://msrc.microsoft.com/update-guide/releaseNote/2022-May

+ Dovecot v2.3.19 released

https://dovecot.org/list/dovecot-news/2022-May/000473.html

+ UPDATE: JVNVU#99612123 OpenSSLに複数の脆弱性

http://jvn.jp/vu/JVNVU99612123/index.html

+ UPDATE: JVNVU#94508446 OpenSSL に複数の脆弱性

http://jvn.jp/vu/JVNVU94508446/index.html

フォーカス

注目の「経済安全保障」　ITへの影響は

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020600014/050600116/?ST=nxt_thmit_security

日経コンピュータ 勝村幸博の「今日も誰かが狙われる」

ブラウザーの中に「偽ブラウザー」　URL確認で防げないフィッシング

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/052100113/042700081/?ST=nxt_thmit_security

JVNVU#96479085 uClibcおよびuClibc-ngにDNSキャッシュポイズニングの問題

http://jvn.jp/vu/JVNVU96479085/index.html

JVN#60801132 GENEREX SYSTEMS 製 RCCMD におけるディレクトリトラバーサルの脆弱性

http://jvn.jp/jp/JVN60801132/index.html