13日 金曜日、先勝

+ PHP 8.5.4, 8.4.19 released

https://www.php.net/ChangeLog-8.php#8.5.4

https://www.php.net/ChangeLog-8.php#8.4.19

+ RHSA-2026:4463 Moderate: python3.12 security update

https://access.redhat.com/errata/RHSA-2026:4463

CVE-2025-15366

CVE-2025-15367

CVE-2026-0865

CVE-2026-1299

+ RHSA-2026:4458 Important: .NET 10.0 security update

https://access.redhat.com/errata/RHSA-2026:4458

CVE-2026-26127

CVE-2026-26130

+ RHSA-2026:4455 Important: .NET 8.0 security update

https://access.redhat.com/errata/RHSA-2026:4455

CVE-2026-26130

+ RHSA-2026:4443 Important: .NET 9.0 security update

https://access.redhat.com/errata/RHSA-2026:4443

CVE-2026-26127

CVE-2026-26130

+ RHSA-2026:4442 Moderate: vim security update

https://access.redhat.com/errata/RHSA-2026:4442

CVE-2026-25749

+ RHSA-2026:4454 Important: .NET 8.0 security update

https://access.redhat.com/errata/RHSA-2026:4454

CVE-2026-26130

日経コンピュータ 勝村幸博の「今日も誰かが狙われる」

「二重脅迫」最強神話が崩壊　窃取データによる脅しは通用せず

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/052100113/030900181/?ST=nxt_thmit_security

VU#907705 Graphql-upload-minimal has a prototype pollution vulnerability.

https://www.kb.cert.org/vuls/id/907705

VU#665416 SGLang (sglang) is vulnerable to code execution attacks via unsafe pickle deserialization

https://www.kb.cert.org/vuls/id/665416

JVNVU#95523788 三菱電機数値制御装置におけるサービス運用妨害（DoS）の脆弱性

https://jvn.jp/vu/JVNVU95523788/index.html