21日 水曜日、先勝

+ RHSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2026:86203

CVE-2026-78667

CVE-2026-78669

CVE-2026-97031

CVE-2026-111943

+ RHSA-2026:85916 Important: perl-DBI:1.641 security update

https://access.redhat.com/errata/RHSA-2026:85916

CVE-2026-88815

+ Google Chrome 156.0.8078.47/.48 released

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html

+ Mozilla Firefox 158.0.1 released

https://www.firefox.com/en-US/firefox/158.0.1/releasenotes/

+ Mozilla Foundation Security Advisory 2026-111 Security Vulnerabilities fixed in Firefox 158.0.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/

CVE-2026-113399

CVE-2026-113470

CVE-2026-113400

CVE-2026-113401

+ Zabbix 7.4.16, 7.0.32, 6.0.49 released

https://www.zabbix.com/rn/rn7.4.16

https://www.zabbix.com/rn/rn7.0.32

https://www.zabbix.com/rn/rn6.0.49

+ Mozilla Foundation Security Advisory 2026-115 Security Vulnerabilities fixed in Thunderbird 153.5.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/

+ Mozilla Foundation Security Advisory 2026-114 Security Vulnerabilities fixed in Thunderbird 158.0.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/

+ Mozilla Foundation Security Advisory 2026-113 Security Vulnerabilities fixed in Firefox ESR 115.43.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-113/

+ Mozilla Foundation Security Advisory 2026-112 Security Vulnerabilities fixed in Firefox ESR 153.5.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-112/

+ Oracle Critical Patch Update Advisory - October 2026

https://www.oracle.com/security-alerts/cpuoct2026.html

VU#645818 Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting

https://www.kb.cert.org/vuls/id/645818

ニュース解説

月例更新で1400件修正の衝撃、Microsoftが示した管理術「リスクコホート」

https://xtech.nikkei.com/atcl/nxt/column/18/00001/12105/?ST=nxt_thmit_security

トレンドマイクロ、国内の組織向けに最大100億円相当のセキュリティー支援

https://xtech.nikkei.com/atcl/nxt/column/18/00001/12104/?ST=nxt_thmit_security

JVN#88864366 アツミ電氣製DVRに利用可能な非公開機能を悪用される問題

https://jvn.jp/jp/JVN88864366/index.html

JVN#33436631 複数のLenovo製タブレットのAndroid Verified Boot機能において既知のテスト用鍵がそのまま使用されている問題

https://jvn.jp/jp/JVN33436631/index.html

JVN#29783594 UnRTFにおける境界外書き込みの脆弱性

https://jvn.jp/jp/JVN29783594/index.html