17日 水曜日、

+ RHSA-2024:0256 Moderate: python3 security update

https://access.redhat.com/errata/RHSA-2024:0256

CVE-2023-27043

+ RHSA-2024:0253 Moderate: sqlite security update

https://access.redhat.com/errata/RHSA-2024:0253

CVE-2023-7104

+ Google Chrome 120.0.6099.224/225 released

https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html

+ Oracle Critical Patch Update Advisory - January 2024

https://www.oracle.com/security-alerts/cpujan2024.html

+ VMSA-2024-0001 VMware Aria Automation (formerly vRealize Automation) updates address a Missing Access Control vulnerability (CVE-2023-34063)

https://www.vmware.com/security/advisories/VMSA-2024-0001.html

CVE-2023-34063

+ JVNVU#90782686 OpenSSLにおける不正なRSA公開鍵のチェックに時間を要する問題（Security Advisory [15th January 2024]）

https://jvn.jp/vu/JVNVU90782686/index.html

+ VU#446598 GPU kernel implementations susceptible to memory leak

https://www.kb.cert.org/vuls/id/446598

CVE-2023-4969

+ VU#302671 SMTP end-of-data uncertainty can be abused to spoof emails and bypass policies

https://www.kb.cert.org/vuls/id/302671

+ VU#132380 Vulnerabilities in EDK2 NetworkPkg IP stack implementation.

https://www.kb.cert.org/vuls/id/132380

CVE-2023-45229

CVE-2023-45230

CVE-2023-45231

CVE-2023-45232

CVE-2023-45233

CVE-2023-45234

CVE-2023-45235

CVE-2023-45236

CVE-2023-45237

勝村幸博の「今日も誰かが狙われる」

間違いメールから始まる恋など存在しない、最新のネット詐欺に記者があえて乗ってみた

https://xtech.nikkei.com/atcl/nxt/column/18/00676/011100158/?ST=nxt_thmit_security

JVN#63383723 Drupal における特定の構造を持つ入力に対する不適切な取り扱いの脆弱性

https://jvn.jp/jp/JVN63383723/index.html