9日 水曜日、先勝

+ RHSA-2022:7822 Low: container-tools:rhel8 security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:7822

CVE-2022-2989

CVE-2022-2990

+ RHSA-2022:7793 Moderate: rsync security and enhancement update

https://access.redhat.com/errata/RHSA-2022:7793

CVE-2022-37434

+ RHSA-2022:7790 Moderate: bind security update

https://access.redhat.com/errata/RHSA-2022:7790

CVE-2021-25220

+ RHSA-2022:7745 Moderate: freetype security update

https://access.redhat.com/errata/RHSA-2022:7745

CVE-2022-27404

CVE-2022-27405

CVE-2022-27406

+ RHSA-2022:7730 Moderate: libldb security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2022:7730

CVE-2022-32746

+ RHSA-2022:7720 Moderate: e2fsprogs security and bug fix update

https://access.redhat.com/errata/RHSA-2022:7720

CVE-2022-1304

+ RHSA-2022:7704 Moderate: webkit2gtk3 security and bug fix update

https://access.redhat.com/errata/RHSA-2022:7704

CVE-2022-22624

CVE-2022-22628

CVE-2022-22629

CVE-2022-22662

CVE-2022-26700

CVE-2022-26709

CVE-2022-26710

CVE-2022-26716

CVE-2022-26717

CVE-2022-26719

CVE-2022-30293

+ RHSA-2022:7648 Moderate: grafana-pcp security update

https://access.redhat.com/errata/RHSA-2022:7648

CVE-2022-1705

CVE-2022-30630

CVE-2022-30631

CVE-2022-30632

CVE-2022-30635

CVE-2022-32148

+ RHSA-2022:7643 Important: bind9.16 security update

https://access.redhat.com/errata/RHSA-2022:7643

CVE-2021-25220

CVE-2022-0396

+ RHSA-2022:7640 Moderate: mutt security update

https://access.redhat.com/errata/RHSA-2022:7640

CVE-2022-1328

+ Mozilla Thunderbird 102.4.2 released

https://www.thunderbird.net/en-US/thunderbird/102.4.2/releasenotes/

+ VMSA-2022-0028 VMware Workspace ONE Assist update addresses multiple vulnerabilities.

https://www.vmware.com/security/advisories/VMSA-2022-0028.html

CVE-2022-31685

CVE-2022-31686

CVE-2022-31687

CVE-2022-31688

CVE-2022-31689

+ PHP 7.4.33 released

https://www.php.net/ChangeLog-7.php#7.4.33

+ Sudo 1.9.12p1 released

https://www.sudo.ws/releases/stable/#1.9.12p1

+ JVNVU#93003913 Apache Tomcatにおける無効なHTTPヘッダの取り扱いに関する問題

http://jvn.jp/vu/JVNVU93003913/index.html

+ JVNVU#92673251 OpenSSLに複数の脆弱性

http://jvn.jp/vu/JVNVU92673251/index.html

+ VU#434994 Multiple race conditions due to TOCTOU flaws in various UEFI Implementations

https://www.kb.cert.org/vuls/id/434994

CVE-2021-33164

+ Python の脆弱性情報(Importabt: CVE-2022-42919)

https://security.sios.com/vulnerability/python-security-vulnerability-20221108.html

+ Linux Kernelの脆弱性(CVE-2022-43945)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20221108.html

+ sudoの脆弱性情報(Important: CVE-2022-43995)

https://security.sios.com/vulnerability/sudo-security-vulnerability-20221104.html