16日 水曜日、友引

+ RHSA-2022:8434 Moderate: dotnet7.0 security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:8434

CVE-2022-41032

+ RHSA-2022:8431 Low: podman security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:8431

CVE-2022-2989

CVE-2022-2990

+ RHSA-2022:8400 Moderate: libtirpc security update

https://access.redhat.com/errata/RHSA-2022:8400

CVE-2021-46828

+ RHSA-2022:8393 Moderate: logrotate security update

https://access.redhat.com/errata/RHSA-2022:8393

CVE-2022-1348

+ RHSA-2022:8385 Moderate: dhcp security and enhancement update

https://access.redhat.com/errata/RHSA-2022:8385

CVE-2021-25220

+ RHSA-2022:8340 Moderate: freetype security update

https://access.redhat.com/errata/RHSA-2022:8340

CVE-2022-27404

CVE-2022-27405

CVE-2022-27406

+ RHSA-2022:8318 Moderate: libldb security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:8318

CVE-2022-32746

+ RHSA-2022:8317 Moderate: samba security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:8317

CVE-2022-32742

+ Mozilla Firefox 107.0 released

https://www.mozilla.org/en-US/firefox/107.0/releasenotes/

+ Mozilla Foundation Security Advisory 2022-47 Security Vulnerabilities fixed in Firefox 107

https://www.mozilla.org/en-US/security/advisories/mfsa2022-47/

CVE-2022-45403

CVE-2022-45404

CVE-2022-45405

CVE-2022-45406

CVE-2022-45407

CVE-2022-45408

CVE-2022-45409

CVE-2022-45410

CVE-2022-45411

CVE-2022-45412

CVE-2022-45413

CVE-2022-40674

CVE-2022-45415

CVE-2022-45416

CVE-2022-45417

CVE-2022-45418

CVE-2022-45419

CVE-2022-45420

CVE-2022-45421

+ Mozilla Thunderbird 102.5.0 released

https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes/

+ Mozilla Foundation Security Advisory 2022-49 Security Vulnerabilities fixed in Thunderbird 102.5

https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/

CVE-2022-45403

CVE-2022-45404

CVE-2022-45405

CVE-2022-45406

CVE-2022-45408

CVE-2022-45409

CVE-2022-45410

CVE-2022-45411

CVE-2022-45412

CVE-2022-45416

CVE-2022-45418

CVE-2022-45420

CVE-2022-45421

+ UPDATE: JVNVU#92867820 OpenSSLのc_rehashスクリプトにおけるコマンドインジェクションの脆弱性

http://jvn.jp/vu/JVNVU92867820/index.html

JVNVU#98082029 複数の三菱電機製家電製品のWi-Fi接続処理におけるデッドロックの脆弱性

http://jvn.jp/vu/JVNVU98082029/index.html

勝村幸博の「今日も誰かが狙われる」

防犯カメラや警備員の場所をドローンで特定、スパイも驚く「Wi-Peep」の正体

https://xtech.nikkei.com/atcl/nxt/column/18/00676/111300120/?ST=nxt_thmit_security

Webブラウザーの快適環境構築法

いろんなWebブラウザーを快適にする「Chromeウェブストア」、厳選の拡張機能

https://xtech.nikkei.com/atcl/nxt/column/18/02255/111400003/?ST=nxt_thmit_security

導入や運用の手間が少ないデータ漏洩防止のクラウド、ゼットスケーラーが開始

https://xtech.nikkei.com/atcl/nxt/news/18/14146/?ST=nxt_thmit_security