14日 水曜日、赤口

+ RHSA-2026:0523 Moderate: postgresql:13 security update

https://access.redhat.com/errata/RHSA-2026:0523

CVE-2025-12817

CVE-2025-12818

+ RHSA-2026:0519 Moderate: postgresql:16 security update

https://access.redhat.com/errata/RHSA-2026:0519

CVE-2025-12817

CVE-2025-12818

+ RHSA-2026:0493 Moderate: postgresql:16 security update

https://access.redhat.com/errata/RHSA-2026:0493

CVE-2025-12817

CVE-2025-12818

+ RHSA-2026:0492 Moderate: postgresql:15 security update

https://access.redhat.com/errata/RHSA-2026:0492

CVE-2025-12817

CVE-2025-12818

+ RHSA-2026:0491 Moderate: postgresql security update

https://access.redhat.com/errata/RHSA-2026:0491

CVE-2025-12817

CVE-2025-12818

+ Google Chrome 144.0.7559.59/60 released

https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html

+ Mozilla Firefox 147.0 released

https://www.firefox.com/en-US/firefox/147.0/releasenotes/

+ Mozilla Foundation Security Advisory 2026-01 Security Vulnerabilities fixed in Firefox 147

https://www.mozilla.org/en-US/security/advisories/mfsa2026-01/

CVE-2026-0877

CVE-2026-0878

CVE-2026-0879

CVE-2026-0880

CVE-2026-0881

CVE-2026-0882

CVE-2026-0883

CVE-2026-0884

CVE-2026-0885

CVE-2026-0886

CVE-2026-0887

CVE-2026-0888

CVE-2026-0889

CVE-2026-0890

CVE-2026-0891

CVE-2026-0892

+ Mozilla Foundation Security Advisory 2026-03 Security Vulnerabilities fixed in Firefox ESR 140.7

https://www.mozilla.org/en-US/security/advisories/mfsa2026-03/

+ Mozilla Foundation Security Advisory 2026-02 Security Vulnerabilities fixed in Firefox ESR 115.32

https://www.mozilla.org/en-US/security/advisories/mfsa2026-02/

+ Mozilla Thunderbird 147.0 released

https://www.thunderbird.net/en-US/thunderbird/147.0/releasenotes/

+ Mozilla Foundation Security Advisory 2025-95 Security Vulnerabilities fixed in Thunderbird 146

https://www.mozilla.org/en-US/security/advisories/mfsa2025-95/

CVE-2025-14321

CVE-2025-14322

CVE-2025-14323

CVE-2025-14324

CVE-2025-14325

CVE-2025-14326

CVE-2025-14327

CVE-2025-14328

CVE-2025-14329

CVE-2025-14330

CVE-2025-14331

CVE-2025-14332

CVE-2025-14333

+ 2026 年 1 月のセキュリティ更新プログラム (月例)

https://www.microsoft.com/en-us/msrc/blog/2026/01/202601-security-update

ランサムウエアに負けない、今すぐやるべき「緊急点検10項目」 第2回

ランサム攻撃者は管理者アカウントを狙う、「最小権限」を点検せよ

https://xtech.nikkei.com/atcl/nxt/column/18/03461/010800003/?ST=nxt_thmit_security

ネットワーク図の描き方入門 第3回

ネットワーク図のノードはアイコンにするか箱にするか、情報量で使い分ける

https://xtech.nikkei.com/atcl/nxt/column/18/03451/122200003/?ST=nxt_thmit_security

JVN#48187396 EATON UPS Companionにおける複数の脆弱性

https://jvn.jp/jp/JVN48187396/index.html

JVNVU#90901068 Hitachi Energy製Asset Suiteにおける信頼できないデータのデシリアライゼーションの脆弱性

https://jvn.jp/vu/JVNVU90901068/index.html