4日 水曜日、先負

+ RHSA-2024:6148 Moderate: nodejs:18 security update

https://access.redhat.com/errata/RHSA-2024:6148

CVE-2024-22020

CVE-2024-28863

+ RHSA-2024:6147 Moderate: nodejs:18 security update

https://access.redhat.com/errata/RHSA-2024:6147

CVE-2024-22020

CVE-2024-28863

+ RHSA-2024:6146 Moderate: python3.12 security update

https://access.redhat.com/errata/RHSA-2024:6146

CVE-2024-6923

+ Mozilla Firefox 130.0 released

https://www.mozilla.org/en-US/firefox/130.0/releasenotes/

+ Mozilla Foundation Security Advisory 2024-39 Security Vulnerabilities fixed in Firefox 130

https://www.mozilla.org/en-US/security/advisories/mfsa2024-39/

CVE-2024-8385

CVE-2024-8381

CVE-2024-8388

CVE-2024-8382

CVE-2024-8383

CVE-2024-8384

CVE-2024-8386

CVE-2024-8387

CVE-2024-8389

+ OpenSSL Security Advisory [3rd September 2024]

https://openssl-library.org/news/secadv/20240903.txt

CVE-2024-6119

+ Microsoft Exchange Privilege Escalation

https://cxsecurity.com/issue/WLB-2024090007

CVE-2019-0724

NECが入場時の混雑を緩和する生体認証システムを販売へ、歩きながらでも検出

https://xtech.nikkei.com/atcl/nxt/news/24/01454/?ST=nxt_thmit_security

JPCERTのネット観測「TSUBAME」でグラフ公開を休止、利活用しやすいデータ提供へ

https://xtech.nikkei.com/atcl/nxt/news/24/01450/?ST=nxt_thmit_security