11日 月曜日、先負

+ MantisBT 2.28.2 released

https://mantisbt.org/blog/archives/mantisbt/835

+ Mozilla Thunderbird 150.0.2 released

https://www.thunderbird.net/en-US/thunderbird/150.0.2/releasenotes/

+ Mozilla Foundation Security Advisory 2026-43 Security Vulnerabilities fixed in Thunderbird 150.0.2

https://www.mozilla.org/en-US/security/advisories/mfsa2026-43/

CVE-2026-8090

CVE-2026-8092

CVE-2026-8093

+ Mozilla Foundation Security Advisory 2026-44 Security Vulnerabilities fixed in Thunderbird 140.10.2

https://www.mozilla.org/en-US/security/advisories/mfsa2026-44/

+ Apache Tomcat 9.0.118 Released

https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.118_(remm)

+ PHP 8.5.6, 8.4.21, 8.3.31, 8.2.31 released

https://www.php.net/ChangeLog-8.php#8.5.6

https://www.php.net/ChangeLog-8.php#8.4.21

https://www.php.net/ChangeLog-8.php#8.3.31

https://www.php.net/ChangeLog-8.php#8.2.31

+ JVNVU#99705957 Apache HTTP Server 2.4における複数の脆弱性に対するアップデート（2026年5月）

https://jvn.jp/vu/JVNVU99705957/index.html

CVE-2026-23918

CVE-2026-24072

CVE-2026-28780

CVE-2026-29168

CVE-2026-29169

CVE-2026-33006

CVE-2026-33007

CVE-2026-33523

CVE-2026-33857

CVE-2026-34032

CVE-2026-34059

+ VU#260001 Linux kernel contains local privilege escalation vulnerability (Copy Fail)

https://www.kb.cert.org/vuls/id/260001

CVE-2026-31431

+ Linux KernelのLPE(Local Privilege Escalation)脆弱性(Dirty Frag: CVE-2026-43284, CVE-2026-43500)

https://security.sios.jp/vulnerability/kernel-security-vulnerability-20260508/

CVE-2026-43284

CVE-2026-43500

キーワード

OpenClaw

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020600009/050700222/?ST=nxt_thmit_security

JVNVU#90918052 CISA ICS Advisory / ICS Medical Advisory（2026年05月07日）

https://jvn.jp/vu/JVNVU90918052/index.html