21日 水曜日、先勝

+ RHSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2026:86203

CVE-2026-78667

CVE-2026-78669

CVE-2026-97031

CVE-2026-111943

+ RHSA-2026:85916 Important: perl-DBI:1.641 security update

https://access.redhat.com/errata/RHSA-2026:85916

CVE-2026-88815

+ Google Chrome 156.0.8078.47/.48 released

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html

+ Mozilla Firefox 158.0.1 released

https://www.firefox.com/en-US/firefox/158.0.1/releasenotes/

+ Mozilla Foundation Security Advisory 2026-111 Security Vulnerabilities fixed in Firefox 158.0.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/

CVE-2026-113399

CVE-2026-113470

CVE-2026-113400

CVE-2026-113401

+ Zabbix 7.4.16, 7.0.32, 6.0.49 released

https://www.zabbix.com/rn/rn7.4.16

https://www.zabbix.com/rn/rn7.0.32

https://www.zabbix.com/rn/rn6.0.49

+ Mozilla Foundation Security Advisory 2026-115 Security Vulnerabilities fixed in Thunderbird 153.5.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/

+ Mozilla Foundation Security Advisory 2026-114 Security Vulnerabilities fixed in Thunderbird 158.0.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/

+ Mozilla Foundation Security Advisory 2026-113 Security Vulnerabilities fixed in Firefox ESR 115.43.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-113/

+ Mozilla Foundation Security Advisory 2026-112 Security Vulnerabilities fixed in Firefox ESR 153.5.1

https://www.mozilla.org/en-US/security/advisories/mfsa2026-112/

+ Oracle Critical Patch Update Advisory - October 2026

https://www.oracle.com/security-alerts/cpuoct2026.html

VU#645818 Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting

https://www.kb.cert.org/vuls/id/645818

ニュース解説

月例更新で1400件修正の衝撃、Microsoftが示した管理術「リスクコホート」

https://xtech.nikkei.com/atcl/nxt/column/18/00001/12105/?ST=nxt_thmit_security

トレンドマイクロ、国内の組織向けに最大100億円相当のセキュリティー支援

https://xtech.nikkei.com/atcl/nxt/column/18/00001/12104/?ST=nxt_thmit_security

JVN#88864366 アツミ電氣製DVRに利用可能な非公開機能を悪用される問題

https://jvn.jp/jp/JVN88864366/index.html

JVN#33436631 複数のLenovo製タブレットのAndroid Verified Boot機能において既知のテスト用鍵がそのまま使用されている問題

https://jvn.jp/jp/JVN33436631/index.html

JVN#29783594 UnRTFにおける境界外書き込みの脆弱性

https://jvn.jp/jp/JVN29783594/index.html

20日 火曜日、赤口

+ 2026 年 10 月のセキュリティ更新プログラム (月例)

https://www.microsoft.com/en-us/msrc/blog/2026/10/202610-security-update

JVNVU#93520490 ヤマハ製VOCALOID6 Editorにおける外部エンティティ参照の不適切な制限の脆弱性

https://jvn.jp/vu/JVNVU93520490/index.html

piyokangoの週刊システムトラブル

焼肉きんぐで1078万件漏洩、相次ぐ情報トラブル　パスワードが対象の事例も

https://xtech.nikkei.com/atcl/nxt/column/18/00598/011300386/?ST=nxt_thmit_security

19日 月曜日、大安

+ local interface connection reuse mixup

https://curl.se/docs/CVE-2026-107929.html

CVE-2026-107929

+ ■Windows DNSの脆弱性情報が公開されました（CVE-2026-83869、他57件）

https://jprs.jp/tech/security/2026-10-16-windowsdns.html

+ ■NSDの脆弱性情報が公開されました

https://jprs.jp/tech/security/2026-10-15-nsd.html

+ RHSA-2026:83657 Moderate: wireshark security update

https://access.redhat.com/errata/RHSA-2026:83657

CVE-2026-76880

CVE-2026-76886

CVE-2026-76919

CVE-2026-76927

+ RHSA-2026:83563 Important: rpcbind security update

https://access.redhat.com/errata/RHSA-2026:83563

CVE-2026-94640

+ Google Chrome 156.0.8078.35/.36, 155.0.8059.84/.85, 152.0.7977.169 released

https://chromereleases.googleblog.com/2026/10/early-stable-update-for-desktop_01549127219.html

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html

https://chromereleases.googleblog.com/2026/10/extended-stable-update-for-desktop_01598036246.html

+ Mozilla Firefox 158.0 released

https://www.firefox.com/en-US/firefox/158.0/releasenotes/

+ Mozilla Foundation Security Advisory 2026-106 Security Vulnerabilities fixed in Firefox 158

https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/

+ nginx 1.31.7, 1.30.6 released

https://nginx.org/en/CHANGES

https://nginx.org/en/CHANGES-1.30

+ Mozilla Foundation Security Advisory 2026-108 Security Vulnerabilities fixed in Firefox ESR 153.5

https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/

+ Mozilla Foundation Security Advisory 2026-107 Security Vulnerabilities fixed in Firefox ESR 115.43

https://www.mozilla.org/en-US/security/advisories/mfsa2026-107/

+ Mozilla Foundation Security Advisory 2026-109 Security Vulnerabilities fixed in Thunderbird 158

https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/

+ Mozilla Foundation Security Advisory 2026-110 Security Vulnerabilities fixed in Thunderbird 153.5

https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/

+ Mozilla Thunderbrid 158.0 released

https://www.thunderbird.net/en-US/thunderbird/158.0/releasenotes/

+ FreeBSD-SA-26:72.bhyve Multiple vulnerabilities in bhyve device models

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:72.bhyve.asc

+ FreeBSD-SA-26:71.sound TOCTOU race between sound(4) buffer resizing and mmap

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:71.sound.asc

+ FreeBSD-SA-26:70.tcp Remotely triggerable buffer overflow in tcp_rack

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:70.tcp.asc

+ Apache Tomcat 11.0.27, 10.1.61, 9.0.123 released

https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.27_(markt)

https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.61_(schultz)

https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.123_(remm)

VU#410595 Google BoringSSL Name Constraints Bypass in SAN Validation Logic

https://www.kb.cert.org/vuls/id/410595

VU#948176 Multiple TLS Libraries can Bypass Delegation Enforcement

https://www.kb.cert.org/vuls/id/948176

VU#166125 Bisheng has authentication bypass vulnerabilities

https://www.kb.cert.org/vuls/id/166125

JVNVU#96928590 CISA ICS Advisory / ICS Medical Advisory（2026年10月15日）

https://jvn.jp/vu/JVNVU96928590/index.html

JVNVU#90141693 Siemens製品に対するアップデート（2026年10月）

https://jvn.jp/vu/JVNVU90141693/index.html

「最後のネスペ試験」が迫る、頻出技術で押さえるネットワークの基礎 第5回

冗長化技術はネスペ試験での出題多数、STPやVRRPなど4技術を解説する

https://xtech.nikkei.com/atcl/nxt/column/18/03791/100700005/?ST=nxt_thmit_security

タイムズカー、本人確認書類画像を10月末までに全削除　確認後に即時消去

https://xtech.nikkei.com/atcl/nxt/news/24/03428/?ST=nxt_thmit_security