31日 金曜日、先負

+ ■（緊急）BIND 9.xの脆弱性（パフォーマンスの低下）について（CVE-2024-12705）

  - バージョンアップを強く推奨 -

https://jprs.jp/tech/security/2025-01-30-bind9-vuln-dnsoverhttps.html

CVE-2024-12705

+ ■（緊急）BIND 9.xの脆弱性（過剰なCPU負荷の誘発）について（CVE-2024-11187）

  - バージョンアップを強く推奨 -

https://jprs.jp/tech/security/2025-01-30-bind9-vuln-additionalsection.html

CVE-2024-11187

+ RHSA-2025:0845 Important: git-lfs security update

https://access.redhat.com/errata/RHSA-2025:0845

CVE-2024-53263

+ RHSA-2025:0838 Important: libsoup security update

https://access.redhat.com/errata/RHSA-2025:0838

CVE-2024-52531

+ RHSA-2025:0837 Important: unbound security update

https://access.redhat.com/errata/RHSA-2025:0837

CVE-2024-1488

CVE-2024-8508

+ About the security content of GarageBand 10.4.12

https://support.apple.com/en-us/121866

CVE-2024-44142

+ FreeBSD-SA-25:04.ktrace Uninitialized kernel memory disclosure via ktrace(2)

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:04.ktrace.asc

CVE-2025-0662

+ FreeBSD-SA-25:03.etcupdate Unprivileged access to system files

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:03.etcupdate.asc

CVE-2025-0374

+ FreeBSD-SA-25:02.fs Buffer overflow in some filesystems via NFS

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:02.fs.asc

CVE-2025-0373

+ FreeBSD-SA-25:01.openssh OpenSSH Keystroke Obfuscation Bypass

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:01.openssh.asc

CVE-2024-39894

+ VU#733789 ChatGPT-4o contains security bypass vulnerability through time and search functions called "Time Bandit"

https://www.kb.cert.org/vuls/id/733789

+ JVNVU#94914427 ISC BINDにおける複数の脆弱性（2025年1月）

https://jvn.jp/vu/JVNVU94914427/index.html

CVE-2024-11187

CVE-2024-12705

日経コンピュータ 勝村幸博の「今日も誰かが狙われる」

記者襲う「フィッシング」最新手口　ワンクリック登録解除など悪用

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/052100113/012900151/?ST=nxt_thmit_security