20日 水曜日、大安

+ Security Bulletin - November 19 2024

https://confluence.atlassian.com/security/security-bulletin-november-19-2024-1456179091.html

+ RHSA-2024:9827 Moderate: libvpx security update

https://access.redhat.com/errata/RHSA-2024:9827

CVE-2024-5197

+ About the security content of Safari 18.1.1

https://support.apple.com/en-us/121756

CVE-2024-44308

CVE-2024-44309

+ About the security content of visionOS 2.1.1

https://support.apple.com/en-us/121755

CVE-2024-44308

CVE-2024-44309

+ About the security content of iOS 18.1.1 and iPadOS 18.1.1

https://support.apple.com/en-us/121752

CVE-2024-44308

CVE-2024-44309

+ About the security content of iOS 17.7.2 and iPadOS 17.7.2

https://support.apple.com/en-us/121754

CVE-2024-44308

CVE-2024-44309

+ About the security content of macOS Sequoia 15.1.1

https://support.apple.com/en-us/121753

CVE-2024-44308

CVE-2024-44309

+ Google Chrome 131.0.6778.85/.86 released

https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop_19.html

+ Zabbix 6.0.36, 5.0.45 released

https://www.zabbix.com/rn/rn6.0.36

https://www.zabbix.com/rn/rn5.0.45

+ Mozilla Thunderbird 128.4.4 released

https://www.thunderbird.net/en-US/thunderbird/128.4.4esr/releasenotes/

JVNVU#97790713 三菱電機製MELSEC iQ-Fにおける指定されたタイプの入力に対する不適切な検証の脆弱性

https://jvn.jp/vu/JVNVU97790713/index.html

JVNVU#96191615 Siemens製品に対するアップデート（2024年11月）

https://jvn.jp/vu/JVNVU96191615/index.html

勝村幸博の「今日も誰かが狙われる」

危険なパスワードの代表格「123456」と「password」、最悪なのはどっちだ

https://xtech.nikkei.com/atcl/nxt/column/18/00676/111200182/?ST=nxt_thmit_security