21日 水曜日、友引

+ Google Chrome 144.0.7559.96/.97 released

https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_20.html

+ Oracle Critical Patch Update Advisory - January 2026

https://www.oracle.com/security-alerts/cpujan2026.html

VU#481830 libheif Uncompressed Codec Lacks Bounds Check Leading to Application Crash

https://www.kb.cert.org/vuls/id/481830

VU#102648 Code Injection Vulnerability in binary-parser library

https://www.kb.cert.org/vuls/id/102648

VU#458022 Open5GS WebUI uses a hard-coded secrets including JSON Web Token signing key

https://www.kb.cert.org/vuls/id/458022

VU#271649 Stack-based buffer overflow in libtasn1 versions v4.20.0 and earlier

https://www.kb.cert.org/vuls/id/271649

VU#818729 Safetica contains a kernel driver vulnerability

https://www.kb.cert.org/vuls/id/818729

Current:VU#244846 Server-Side Template Injection (SSTI) vulnerability exist in Genshi

https://www.kb.cert.org/vuls/id/244846

VU#924114 dr_flac contains an integer overflow vulnerability that allows for DoS when provided a crafted file

https://www.kb.cert.org/vuls/id/924114

タワマンネットワークの秘密 第3回

タワマンのネット接続に疑問、通信品質とプライバシーはどう保たれている？

https://xtech.nikkei.com/atcl/nxt/column/18/03468/011300003/?ST=nxt_thmit_security

勝村幸博の「今日も誰かが狙われる」

フィッシング詐欺が記者を直撃、事例で学ぶ「だまし」の常とう手段

https://xtech.nikkei.com/atcl/nxt/column/18/00676/011400215/?ST=nxt_thmit_security