5日 月曜日、大安

+ Google Chrome 105.0.5195.102, 104.0.5112.114 released

https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html

https://chromereleases.googleblog.com/2022/09/extended-stable-channel-update-for.html

+ CESA-2022:6170 Important CentOS 7 rsync Security Update

https://lwn.net/Articles/906912/

+ CESA-2022:6160 Important CentOS 7 systemd Security Update

https://lwn.net/Articles/906913/

+ CESA-2022:6169 Important CentOS 7 thunderbird Security Update

https://lwn.net/Articles/906914/

+ CESA-2022:6179 Important CentOS 7 firefox Security Update

https://lwn.net/Articles/906911/

+ Microsoft Edge 105.0.1343.25 released

https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#september-2-2022

+ September 2022 Early Security Updates

https://msrc.microsoft.com/update-guide/releaseNote/2022-Sep

+ gawk 5.2.0 released

http://ftp.gnu.org/gnu/gawk/?C=M;O=D

+ VMSA-2022-0024.1 VMware Tools update addresses a local privilege escalation vulnerability (CVE-2022-31676)

https://www.vmware.com/security/advisories/VMSA-2022-0024.html

CVE-2022-31676

+ PHP 8.1.10, 8.0.23 released

https://www.php.net/ChangeLog-8.php#8.1.10

https://www.php.net/ChangeLog-8.php#8.0.23

+ Linux Kernelに複数の脆弱性(CVE-2022-1205 CVE-2022-1247 CVE-2022-1263 CVE-2022-1508 CVE-2022-1974 CVE-2022-1975 CVE-2022-1976 CVE-2022-2153 CVE-2022-2590 CVE-2022-3028 CVE-2022-1729 CVE-2022-2308 CVE-2022-2639 CVE-2022-2663 CVE-2022-3061 CVE-2022-3078 )

https://security.sios.com/vulnerability/kernel-security-vulnerability-20220904.html

CVE-2022-1205

CVE-2022-1247

CVE-2022-1263

CVE-2022-1508

CVE-2022-1974

CVE-2022-1975

CVE-2022-1976

CVE-2022-2153

CVE-2022-2590

CVE-2022-3028

CVE-2022-1729

CVE-2022-2308

CVE-2022-2639

CVE-2022-2663

CVE-2022-3061

CVE-2022-3078

Chrome OS Flexでパソコン大復活

Webアプリとクラウドが基本、Chrome OS Flexの使い方を学ぼう

https://xtech.nikkei.com/atcl/nxt/column/18/02159/080300003/?ST=nxt_thmit_security

レジリエンスプログラミングのすすめ

リソースを適切に分離して分散システムのレジリエンスを高める「バルクヘッド」

https://xtech.nikkei.com/atcl/nxt/column/18/02090/083000004/?ST=nxt_thmit_security

NECプラットフォームズが工場や店頭など向けに新タブレット端末、来春から販売

https://xtech.nikkei.com/atcl/nxt/news/18/13615/?ST=nxt_thmit_security

JVNVU#98006941 Contec Medical Systems製Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitorにおける複数の脆弱性

http://jvn.jp/vu/JVNVU98006941/index.html

JVNVU#95384057 Delta Electronics製DOPSoftにおける境界外読み取りの脆弱性

http://jvn.jp/vu/JVNVU95384057/index.html

JVN#76024879 PowerCMS の XMLRPC API におけるコマンドインジェクションの脆弱性

http://jvn.jp/jp/JVN76024879/index.html