31日 金曜日、大安

+ RHSA-2023:1533 Important: nodejs:14 security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2023:1533

CVE-2021-35065

CVE-2021-44906

CVE-2022-3517

CVE-2022-4904

CVE-2022-24999

CVE-2022-25881

CVE-2022-35256

CVE-2022-38900

CVE-2022-43548

CVE-2023-23918

CVE-2023-23920

+ RHSA-2023:1529 Moderate: Service Telemetry Framework 1.5 security update

https://access.redhat.com/errata/RHSA-2023:1529

CVE-2022-1705

CVE-2022-23772

CVE-2022-23773

CVE-2022-23806

CVE-2022-24675

CVE-2022-27664

CVE-2022-28327

CVE-2022-29526

CVE-2022-30629

CVE-2022-30630

CVE-2022-30631

CVE-2022-30632

CVE-2022-32189

CVE-2022-41715

CVE-2022-41717

+ RHSA-2023:1516 Important: Red Hat JBoss Enterprise Application Platform 7.4.10 security update

https://access.redhat.com/errata/RHSA-2023:1516

CVE-2022-1471

CVE-2022-4492

CVE-2022-38752

CVE-2022-41853

CVE-2022-41854

CVE-2022-41881

CVE-2022-45787

CVE-2023-0482

CVE-2023-1108

+ RHSA-2023:1310 Moderate: Logging Subsystem for Red Hat OpenShift - 5.5.9 security update

https://access.redhat.com/errata/RHSA-2023:1310

CVE-2022-4304

CVE-2022-4450

CVE-2022-41717

CVE-2023-0215

CVE-2023-0286

CVE-2023-0767

CVE-2023-23916

+ RHSA-2023:1392 Moderate: OpenShift Container Platform 4.10.55 security update

https://access.redhat.com/errata/RHSA-2023:1392

CVE-2021-20329

CVE-2022-3564

CVE-2022-4269

CVE-2022-4378

CVE-2023-0767

+ RHSA-2023:1393 Important: OpenShift Container Platform 4.10.55 security update

https://access.redhat.com/errata/RHSA-2023:1393

CVE-2021-4238

CVE-2022-3564

CVE-2022-4269

CVE-2022-4378

+ Announcing the Beta releases of Red Hat Enterprise Linux 8.8 and 9.2

https://access.redhat.com/announcements/7003578

+ About the security content of Xcode 14.3

https://support.apple.com/ja-jp/HT213679

CVE-2023-27967

CVE-2023-27945

+ Google Chrome 112.0.5615.49 released

https://chromereleases.googleblog.com/2023/03/early-stable-update-for-desktop_29.html

+ Mozilla Foundation Security Advisory 2023-12 Security Vulnerabilities fixed in Thunderbird 102.9.1

CVE-2023-28427

+ Samba 4.18.1, 4.17.7 and 4.16.10 Security Releases are available for Download

https://www.samba.org/samba/latest_news.html#4.18.1

+ JVNVU#99604728 OpenSSLに複数の脆弱性（Security Advisory [28th March 2023]）

http://jvn.jp/vu/JVNVU99604728/index.html

+ Sambaの脆弱性(CVE-2023-0225, CVE-2023-0922, CVE-2023-0614)と新バージョン(4.18.1, 4.17.7, 4.16.10)

https://security.sios.jp/vulnerability/samba-security-vulnerability-20230330/

CVE-2023-0225

CVE-2023-0922

CVE-2023-0614

+ Linux Kernelの脆弱性(Important: CVE-2023-1078, Moderate: CVE-2023-1073, CVE-2023-1077, CVE-2023-1079, Low:CVE-2023-1074, CVE-2023-1075, CVE-2023-1076)

https://security.sios.jp/vulnerability/kernel-security-vulnerability-20230330/

CVE-2023-1078

CVE-2023-1073

CVE-2023-1077

CVE-2023-1079

CVE-2023-1074

CVE-2023-1075

CVE-2023-1076

ニュース解説

個情委がNISC・警察・IPAと情報漏洩事故対応で連携、なおも残る事業者の負担

https://xtech.nikkei.com/atcl/nxt/column/18/00001/07875/?ST=nxt_thmit_security

ITが危ない

6月施行の改正電通事法へ備えはあるか、オンラインサービスを提供する企業は再点検を

https://xtech.nikkei.com/atcl/nxt/column/18/00989/032600113/?ST=nxt_thmit_security

週末スペシャル

シン・スマートタグ「Eufy Security SmartTrack Card」、便利すぎる用途とは

https://xtech.nikkei.com/atcl/nxt/column/18/00160/032800348/?ST=nxt_thmit_security

コンビニ交付で別人の住民票が発行されるバグ、富士通Japanが原因を説明

https://xtech.nikkei.com/atcl/nxt/news/18/14920/?ST=nxt_thmit_security

NECセキュリティが発足、データ起点のサイバーセキュリティーサービスを提供

https://xtech.nikkei.com/atcl/nxt/news/18/14918/?ST=nxt_thmit_security

大阪急性期・総合医療センターがランサムウエア被害の報告書公開、実態を読み解く

https://xtech.nikkei.com/atcl/nxt/column/18/00001/07877/?ST=nxt_thmit_security

別人の住民票が誤って発行されるバグ、富士通Japanのコンビニ交付サービスで

https://xtech.nikkei.com/atcl/nxt/news/18/14913/?ST=nxt_thmit_security