13日 金曜日、先勝

+ PHP 8.5.4, 8.4.19 released

https://www.php.net/ChangeLog-8.php#8.5.4

https://www.php.net/ChangeLog-8.php#8.4.19

+ RHSA-2026:4463 Moderate: python3.12 security update

https://access.redhat.com/errata/RHSA-2026:4463

CVE-2025-15366

CVE-2025-15367

CVE-2026-0865

CVE-2026-1299

+ RHSA-2026:4458 Important: .NET 10.0 security update

https://access.redhat.com/errata/RHSA-2026:4458

CVE-2026-26127

CVE-2026-26130

+ RHSA-2026:4455 Important: .NET 8.0 security update

https://access.redhat.com/errata/RHSA-2026:4455

CVE-2026-26130

+ RHSA-2026:4443 Important: .NET 9.0 security update

https://access.redhat.com/errata/RHSA-2026:4443

CVE-2026-26127

CVE-2026-26130

+ RHSA-2026:4442 Moderate: vim security update

https://access.redhat.com/errata/RHSA-2026:4442

CVE-2026-25749

+ RHSA-2026:4454 Important: .NET 8.0 security update

https://access.redhat.com/errata/RHSA-2026:4454

CVE-2026-26130

日経コンピュータ 勝村幸博の「今日も誰かが狙われる」

「二重脅迫」最強神話が崩壊　窃取データによる脅しは通用せず

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/052100113/030900181/?ST=nxt_thmit_security

VU#907705 Graphql-upload-minimal has a prototype pollution vulnerability.

https://www.kb.cert.org/vuls/id/907705

VU#665416 SGLang (sglang) is vulnerable to code execution attacks via unsafe pickle deserialization

https://www.kb.cert.org/vuls/id/665416

JVNVU#95523788 三菱電機数値制御装置におけるサービス運用妨害（DoS）の脆弱性

https://jvn.jp/vu/JVNVU95523788/index.html

12日 木曜日、赤口

+ use after free in SMB connection reuse

https://curl.se/docs/CVE-2026-3805.html

CVE-2026-3805

+ wrong proxy connection reuse with credentials

https://curl.se/docs/CVE-2026-3784.html

CVE-2026-3784

+ token leak with redirect and netrc

https://curl.se/docs/CVE-2026-3783.html

CVE-2026-3783

+ bad reuse of HTTP Negotiate connection

https://curl.se/docs/CVE-2026-1965.html

CVE-2026-1965

+ Mozilla Thuderbird 148.0.1 released

https://www.thunderbird.net/en-US/thunderbird/148.0.1/releasenotes/

+ Postfix stable release 3.11.1

https://www.postfix.org/announcements/postfix-3.11.1.html

JVNVU#94678141 Intel製品に複数の脆弱性（2026年3月）

https://jvn.jp/vu/JVNVU94678141/index.html

JVNVU#98399171 Apeman製Apeman ID71における複数の脆弱性

https://jvn.jp/vu/JVNVU98399171/index.html

JVNVU#97972410 複数のLantronix製品における複数の脆弱性

https://jvn.jp/vu/JVNVU97972410/index.html

JVNVU#96698975 Honeywell製IQ4x BMS Controllerにおける重要な機能に対する認証の欠如の脆弱性

https://jvn.jp/vu/JVNVU96698975/index.html

JVNVU#95579906 複数のCeragon製品におけるアップロードするファイルの検証が不十分な脆弱性

https://jvn.jp/vu/JVNVU95579906/index.html

JVNVU#98103854 マイクロリサーチ製MR-GM5L-S1およびMR-GM5A-L1における複数の脆弱性

https://jvn.jp/vu/JVNVU98103854/index.html

JVNVU#98768397 Siemens製品に対するアップデート（2026年3月）

https://jvn.jp/vu/JVNVU98768397/index.html

UPDATE: JVNVU#91585837 Siemens製品に対するアップデート（2024年10月）

https://jvn.jp/vu/JVNVU91585837/index.html

11日 水曜日、大安

+ RHSA-2026:4146 Important: python-pyasn1 security update

https://access.redhat.com/errata/RHSA-2026:4146

CVE-2026-23490

+ RHSA-2026:4064 Important: postgresql:12 security update

https://access.redhat.com/errata/RHSA-2026:4064

CVE-2026-2004

CVE-2026-2005

CVE-2026-2006

+ RHSA-2026:4063 Important: postgresql:16 security update

https://access.redhat.com/errata/RHSA-2026:4063

CVE-2026-2004

CVE-2026-2005

CVE-2026-2006

+ RHSA-2026:4059 Important: postgresql:15 security update

https://access.redhat.com/errata/RHSA-2026:4059

CVE-2026-2004

CVE-2026-2005

CVE-2026-2006

+ RHSA-2026:4024 Important: postgresql:13 security update

https://access.redhat.com/errata/RHSA-2026:4024

CVE-2026-2004

CVE-2026-2005

CVE-2026-2006

+ RHSA-2026:3963 Moderate: kernel security update

https://access.redhat.com/errata/RHSA-2026:3963

CVE-2025-71085

CVE-2026-23001

+ RHSA-2026:4235 Moderate: nginx:1.26 security update

https://access.redhat.com/errata/RHSA-2026:4235

CVE-2026-1642

+ RHSA-2026:4173 Important: gimp security update

https://access.redhat.com/errata/RHSA-2026:4173

CVE-2026-0797

CVE-2026-2044

CVE-2026-2045

CVE-2026-2047

CVE-2026-2048

+ RHSA-2026:4165 Moderate: python3.12 security update

https://access.redhat.com/errata/RHSA-2026:4165

CVE-2025-15366

CVE-2025-15367

CVE-2026-1299

+ RHSA-2026:3987 Important: kpatch-patch-5_14_0-611_9_1 security update

https://access.redhat.com/errata/RHSA-2026:3987

CVE-2025-40248

+ RHSA-2026:3966 Moderate: kernel security update

https://access.redhat.com/errata/RHSA-2026:3966

CVE-2025-38106

CVE-2026-23001

+ macOS Tahoe 26.3.2 released

https://support.apple.com/en-us/100100

+ Google Chrome 146.0.7680.71/72 released

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html

+ Mozilla Firefox 148.0.2 released

https://www.firefox.com/en-US/firefox/148.0.2/releasenotes/

+ Mozilla Foundation Security Advisory 2026-19 Security Vulnerabilities fixed in Firefox 148.0.2

https://www.mozilla.org/en-US/security/advisories/mfsa2026-19/

CVE-2026-3845

CVE-2026-3846

CVE-2026-3847

+ Apache Tomcat Native 2.0.14, 1.3.7 released

https://tomcat.apache.org/native-doc/miscellaneous/changelog.html#2.0.14

https://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html#1.3.7

+ FreeBSD 14.4-RELEASE Announcement

https://www.freebsd.org/releases/14.4R/announce/

JVNVU#95523788 三菱電機数値制御装置におけるサービス運用妨害（DoS）の脆弱性

https://jvn.jp/vu/JVNVU95523788/index.html

乱立するAIエージェント、管理ツール徹底解剖 第1回

群雄割拠のAIエージェント管理、UiPathはツール連携　Salesforceは二刀流

https://xtech.nikkei.com/atcl/nxt/column/18/03541/030900001/?ST=nxt_thmit_security