18日 木曜日、先勝

+ more POST-after-PUT confusion

https://curl.se/docs/CVE-2023-28322.html

CVE-2023-28322

+ IDN wildcard match

https://curl.se/docs/CVE-2023-28321.html

CVE-2023-28321

+ siglongjmp race condition

https://curl.se/docs/CVE-2023-28320.html

CVE-2023-28320

+ UAF in SSH sha256 fingerprint

https://curl.se/docs/CVE-2023-28319.html

CVE-2023-28319

+ ISC BIND 9.18.15, 9.16.41 released

https://downloads.isc.org/isc/bind9/9.18.15/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.16.41/doc/arm/html/notes.html

Announcing The BlueHat Podcast: Listen and Subscribe Now!

https://msrc.microsoft.com/blog/2023/05/announcing-the-bluehat-podcast-listen-and-subscribe-now/

UPDATE: JVNVU#99551468 図研エルミック製KASAGOにおける不十分なランダム値の使用の脆弱性

http://jvn.jp/vu/JVNVU99551468/index.html

JVNVU#94609376 複数のRockwell Automation製品における複数の脆弱性

http://jvn.jp/vu/JVNVU94609376/index.html