21日 月曜日、赤口

+ Experiencing delays in adding Customers to service projects

https://jira-service-management.status.atlassian.com/incidents/tnpcfvrl6dg8

+ Some customers may experience outdated DevOps data

https://jira-service-management.status.atlassian.com/incidents/xfs5z9zhwp6y

+ Mozilla Firefox 116.0.3 released

https://www.mozilla.org/en-US/firefox/116.0.3/releasenotes/

+ Apache PDFBox 3.0.0 released

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310760&version=12328836

+ ISC BIND 9.18.18, 9.16.43 released

https://downloads.isc.org/isc/bind9/9.18.18/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.16.43/doc/arm/html/notes.html

+ ClamAV 1.1.1, 1.0.2, 0.103.9 patch versions published

https://blog.clamav.net/2023/07/2023-08-16-releases.html

+ PHP 8.2.9 released

https://www.php.net/ChangeLog-8.php#8.2.9

+ zlib 1.3 released

http://www.zlib.net/ChangeLog.txt

+ JVNVU#91213144 OpenSSLに複数の脆弱性

http://jvn.jp/vu/JVNVU91213144/index.html

CVE-2023-0286

CVE-2022-4304

CVE-2023-0215

CVE-2022-4203

CVE-2023-0216

CVE-2023-0217

CVE-2023-0401

CVE-2022-4450

+ VU#287122 Parsec Remote Desktop App is prone to a local elevation of privilege due to a logical flaw in its code integrity verification process

https://www.kb.cert.org/vuls/id/287122

CVE-2023-37250

+ Linux Kernelの脆弱性(Important: CVE-2023-4147)

https://security.sios.jp/vulnerability/kernel-security-vulnerability-20230816/

CVE-2023-4147

JVNVU#93627577 Schneider Electric製PowerLogicにおける重要な情報の平文送信の脆弱性

http://jvn.jp/vu/JVNVU93627577/index.html

JVNVU#94625748 Walchem製Intuition 9における複数の脆弱性

http://jvn.jp/vu/JVNVU94625748/index.html

JVN#19661362 Proself における複数の脆弱性

http://jvn.jp/jp/JVN19661362/index.html

JVN#46993816 EC-CUBE 2系におけるクロスサイトスクリプティングの脆弱性

http://jvn.jp/jp/JVN46993816/index.html

JVNVU#91985993 複数のSchneider Electric製品におけるCapture-replayによる認証回避の脆弱性

http://jvn.jp/vu/JVNVU91985993/index.html

JVNVU#95172760 Rockwell Automation製Armor PowerFlexにおける計算誤りの脆弱性

http://jvn.jp/vu/JVNVU95172760/index.html