22日 木曜日、先負

+ About the security content of Safari 16.5.1

https://support.apple.com/ja-jp/HT213816

CVE-2023-32439

+ About the security content of iOS 16.5.1 and iPadOS 16.5.1

https://support.apple.com/ja-jp/HT213814

CVE-2023-32434

CVE-2023-32439

+ About the security content of iOS 15.7.7 and iPadOS 15.7.7

https://support.apple.com/ja-jp/HT213811

CVE-2023-32434

CVE-2023-32439

CVE-2023-32435

+ About the security content of macOS Ventura 13.4.1

https://support.apple.com/ja-jp/HT213813

CVE-2023-32434

CVE-2023-32439

+ About the security content of macOS Monterey 12.6.7

https://support.apple.com/ja-jp/HT213810

CVE-2023-32434

+ About the security content of macOS Big Sur 11.7.8

https://support.apple.com/ja-jp/HT213809

CVE-2023-32434

+ About the security content of watchOS 9.5.2

https://support.apple.com/ja-jp/HT213812

CVE-2023-32434

+ About the security content of watchOS 8.8.1

https://support.apple.com/ja-jp/HT213808

CVE-2023-32434

+ ISC BIND 9.18.16, 9.16.42 released

https://downloads.isc.org/isc/bind9/9.18.16/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.16.42/doc/arm/html/notes.html

+ FreeBSD-SA-23:05.openssh ssh-add does not honor per-hop destination constraints

https://www.freebsd.org/security/advisories/FreeBSD-SA-23:05.openssh.asc

CVE-2023-28531

+ FreeBSD-SA-23:04.pam_krb5 Network authentication attack via pam_krb5

https://www.freebsd.org/security/advisories/FreeBSD-SA-23:04.pam_krb5.asc

CVE-2023-3326

+ BIND 9の脆弱性情報(Hig: CVE-2023-2828, CVE-2023-2829, CVE-2023-2911)と新バージョン(9.16.42, 9.18.16, 9.19.14 )

https://security.sios.jp/vulnerability/bind-security-vulnerability-20230622/

CVE-2023-2828

CVE-2023-2829

CVE-2023-2911

JVNVU#97747279 Enphase Energy製品における複数の脆弱性

http://jvn.jp/vu/JVNVU97747279/index.html

記者の眼

相次ぐSaaSへの攻撃で浮かぶ「嫌な仮説」、事業者は有事に備え再点検を

https://xtech.nikkei.com/atcl/nxt/column/18/00138/061901311/?ST=nxt_thmit_security

富士通Japan製コンビニ交付システムの総点検が完了、安全のための「新機能」を実装へ

https://xtech.nikkei.com/atcl/nxt/news/18/15455/?ST=nxt_thmit_security

AWSが14個のセキュリティー機能を一気に発表、「ゼロトラストの次」語る

https://xtech.nikkei.com/atcl/nxt/column/18/00001/08138/?ST=nxt_thmit_security