10日 金曜日、赤口

+ gawk 5.4.1 released

https://ftp.gnu.org/gnu/gawk/?C=M;O=D

+ RHSA-2026:37282 Important: unbound security update

https://access.redhat.com/errata/RHSA-2026:37282

CVE-2026-40622

CVE-2026-41292

CVE-2026-42534

CVE-2026-44390

+ RHSA-2026:37130 Important: gstreamer1-plugins-bad-free security update

https://access.redhat.com/errata/RHSA-2026:37130

CVE-2026-52720

CVE-2026-52722

+ RHSA-2026:37435 Important: golang security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2026:37435

CVE-2026-39821

CVE-2026-39822

+ RHSA-2026:37410 Important: buildah security update

https://access.redhat.com/errata/RHSA-2026:37410

CVE-2026-39832

CVE-2026-39835

+ RHSA-2026:37207 Important: freerdp security update

https://access.redhat.com/errata/RHSA-2026:37207

CVE-2026-45700

+ RHSA-2026:37123 Important: podman security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2026:37123

CVE-2026-25681

CVE-2026-27136

CVE-2026-39829

CVE-2026-39832

CVE-2026-39835

CVE-2026-42508

CVE-2026-57231

+ RHSA-2026:36957 Important: kernel security update

https://access.redhat.com/errata/RHSA-2026:36957

CVE-2025-71066

CVE-2026-46113

CVE-2026-53359

+ Wireshark 4.6.7, 4.4.17 released

https://www.wireshark.org/docs/relnotes/wireshark-4.6.7.html

https://www.wireshark.org/docs/relnotes/wireshark-4.4.17.html

VU#152953 PayRange Android app version 7.0.7 contains multiple vulnerabilities

https://www.kb.cert.org/vuls/id/152953

VU#734812 Xerte Online Toolkit contains an authentication bypass that allows for RCE

https://www.kb.cert.org/vuls/id/734812

決算調査で判明、企業を襲うサイバー詐欺とサイバー攻撃 第2回

サイバー詐欺で18社が損失を計上　海外拠点で頻発、支払い統制がカギか

https://xtech.nikkei.com/atcl/nxt/column/18/03678/070800002/?ST=nxt_thmit_security

JVNVU#99220646 Adalo App Builderにおける複数の脆弱性

https://jvn.jp/vu/JVNVU99220646/index.html

JVN#48718197 リコー製Web Image Monitorを実装している複数のレーザープリンタおよび複合機（MFP）における反射型クロスサイトスクリプティングの脆弱性

https://jvn.jp/jp/JVN48718197/index.html