5日 木曜日、仏滅

+ Mozilla Thunderbird 128.2.0 released

https://www.thunderbird.net/en-US/thunderbird/128.2.0esr/releasenotes/

+ ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versions published

https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html

+ FreeBSD-SA-24:14.umtx umtx Kernel panic or Use-After-Free

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:14.umtx.asc

CVE-2024-43102

+ FreeBSD-SA-24:13.openssl Possible DoS in X.509 name checks in OpenSSL

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:13.openssl.asc

CVE-2024-6119

+ FreeBSD-SA-24:12.bhyve bhyve(8) privileged guest escape via USB controller

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:12.bhyve.asc

CVE-2024-32668

+ FreeBSD-SA-24:11.ctl Multiple issues in ctl(4) CAM Target Layer

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:11.ctl.asc

CVE-2024-8178

CVE-2024-42416

CVE-2024-43110

CVE-2024-45063

+ FreeBSD-SA-24:10.bhyve bhyve(8) privileged guest escape via TPM device passthrough

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:10.bhyve.asc

CVE-2024-41928

+ FreeBSD-SA-24:09.libnv Multiple vulnerabilities in libnv

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:09.libnv.asc

CVE-2024-45287

CVE-2024-45288

+ OpenSSLの脆弱性(Moderate: CVE-2024-6119)

https://security.sios.jp/vulnerability/openssl-security-vulnerability-20240904/

CVE-2024-6119

ニュース＆リポート

機密コンピューティングをOSSで　NTTデータGが実現方式を確立

ガバメントクラウドの調達要件にも

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020800017/082901130/?ST=nxt_thmit_security

ニチイHD、ランサムウエア被害で約2万6000件のファイルが暗号化

https://xtech.nikkei.com/atcl/nxt/news/24/01460/?ST=nxt_thmit_security

JVNVU#95467418 複数のLOYTEC electronics製品における複数の脆弱性

https://jvn.jp/vu/JVNVU95467418/index.html

JVN#67963942 WordPress用プラグインAdvanced Custom Fieldsにおけるクロスサイトスクリプティングの脆弱性

https://jvn.jp/jp/JVN67963942/index.html