12日 水曜日、先負

+ Jira and Confluence has degraded performance - scoped to Brazil only

https://jira-service-management.status.atlassian.com/incidents/8s27j26z06vq

https://confluence.status.atlassian.com/incidents/mrg2r22znjzn

+ RHSA-2025:1338 Moderate: gcc-toolset-14-gcc security update

https://access.redhat.com/errata/RHSA-2025:1338

CVE-2020-11023

+ RHSA-2025:1306 Moderate: gcc-toolset-13-gcc security update

https://access.redhat.com/errata/RHSA-2025:1306

CVE-2020-11023

+ RHSA-2025:1301 Moderate: gcc security update

https://access.redhat.com/errata/RHSA-2025:1301

CVE-2020-11023

+ RHSA-2025:1292 Important: thunderbird security update

https://access.redhat.com/errata/RHSA-2025:1292

CVE-2025-0510

CVE-2025-1009

CVE-2025-1010

CVE-2025-1011

CVE-2025-1012

CVE-2025-1013

CVE-2025-1014

CVE-2025-1015

CVE-2025-1016

CVE-2025-1017

+ RHSA-2025:1283 Important: firefox security update

https://access.redhat.com/errata/RHSA-2025:1283

CVE-2025-1009

CVE-2025-1010

CVE-2025-1011

CVE-2025-1012

CVE-2025-1013

CVE-2025-1014

CVE-2025-1016

CVE-2025-1017

+ RHSA-2025:1266 Important: kernel security update

https://access.redhat.com/errata/RHSA-2025:1266

CVE-2024-53104

+ RHSA-2025:1215 Moderate: tbb security update

https://access.redhat.com/errata/RHSA-2025:1215

CVE-2020-11023

+ RHSA-2025:1330 Important: openssl security update

https://access.redhat.com/errata/RHSA-2025:1330

CVE-2024-12797

+ RHSA-2025:1309 Moderate: gcc-toolset-13-gcc security update

https://access.redhat.com/errata/RHSA-2025:1309

CVE-2020-11023

+ RHSA-2025:1300 Moderate: gcc-toolset-14-gcc security update

https://access.redhat.com/errata/RHSA-2025:1300

CVE-2020-11023

+ RHSA-2025:1262 Important: kernel security update

https://access.redhat.com/errata/RHSA-2025:1262

CVE-2024-53104

+ RHSA-2025:1210 Moderate: tbb security update

https://access.redhat.com/errata/RHSA-2025:1210

CVE-2020-11023

+ RHSA-2025:1184 Important: thunderbird security update

https://access.redhat.com/errata/RHSA-2025:1184

CVE-2025-0510

CVE-2025-1009

CVE-2025-1010

CVE-2025-1011

CVE-2025-1012

CVE-2025-1013

CVE-2025-1014

CVE-2025-1015

CVE-2025-1016

CVE-2025-1017

+ About the security content of iOS 18.3.1 and iPadOS 18.3.1

https://support.apple.com/en-us/122174

CVE-2025-24200

+ About the security content of iPadOS 17.7.5

https://support.apple.com/en-us/122173

CVE-2025-24200

+ macOS Sequoia 15.3.1 released

+ macOS Sonoma 14.7.4 released

+ macOS Ventura 13.7.4 released

+ watchOS 11.3.1 released

+ visionOS 2.3.1 released

https://support.apple.com/en-us/100100

+ 2025 年 2 月のセキュリティ更新プログラム (月例)

https://msrc.microsoft.com/blog/2025/02/202502-security-update/

+UPDATE: Oracle Critical Patch Update Advisory - January 2025

https://www.oracle.com/security-alerts/cpujan2025.html

+ Apache Tomcat 11.0.3, 10.1.35, 9.0.99 released

https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.3_(markt)

https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.35_(schultz)

https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.99_(remm)

piyokangoの週刊システムトラブル

ドコモ・電通Gが出資するD2Cのメールがなりすまし認定、新システムがDMARC非対応

https://xtech.nikkei.com/atcl/nxt/column/18/00598/111500302/?ST=nxt_thmit_security

「能動的サイバー防御」実現へ、政府が関連法案を閣議決定

https://xtech.nikkei.com/atcl/nxt/news/24/02155/?ST=nxt_thmit_security

JVN#84319378 acmailerにおけるクロスサイトスクリプティングの脆弱性

https://jvn.jp/jp/JVN84319378/index.html

JVNVU#94278747 2N製2N Access Commanderにおける複数の脆弱性

https://jvn.jp/vu/JVNVU94278747/index.html

JVNVU#90908488 エレコム製無線LANルーターにおけるOSコマンドインジェクションの脆弱性

https://jvn.jp/vu/JVNVU90908488/index.html

JVNVU#91630351 エレコム製およびロジテック製ネットワーク機器における複数の脆弱性

https://jvn.jp/vu/JVNVU91630351/index.html

JVN#06672778 エレコム製無線LANルーターにおける複数の脆弱性

https://jvn.jp/jp/JVN06672778/index.html