8日 水曜日、赤口

+ RHSA-2025:17509 Important: open-vm-tools security update

https://access.redhat.com/errata/RHSA-2025:17509

CVE-2025-41244

+ RHSA-2025:17415 Moderate: gnutls security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2025:17415

CVE-2025-6395

CVE-2025-32988

CVE-2025-32990

+ RHSA-2025:17377 Moderate: kernel security update

https://access.redhat.com/errata/RHSA-2025:17377

CVE-2024-50301

CVE-2025-38351

CVE-2025-39761

+ Google Chrome 141.0.7390.65/.66, 140.0.7339.240 released

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html

https://chromereleases.googleblog.com/2025/10/extended-stable-updates-for-desktop.html

+ ClamAV 1.5.0 released!

https://blog.clamav.net/2025/10/clamav-150-released.html

+ Apache Tomcat 11.0.12, 10.1.47 released

https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.12_(markt)

https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.47_(schultz)

国内でも被害相次ぐ、ランサムウエア攻撃の手口を暴く

第2回

ランサムウエア攻撃者は「自給自足」で検知回避、Active Directoryサーバーを乗っ取る

https://xtech.nikkei.com/atcl/nxt/column/18/03365/100600003/?ST=nxt_thmit_security

ニュース解説

楽天証券が10月末にパスキー全面導入、SBI証券も追随　フィッシング対策の本命

https://xtech.nikkei.com/atcl/nxt/column/18/00001/11141/?ST=nxt_thmit_security

UPDATE: JVN#23423519 DataSpider ServistaにおけるXML外部実体参照（XXE）に関する脆弱性

https://jvn.jp/jp/JVN23423519/index.html