9日 水曜日、仏滅

+ RHSA-2026:65160 Important: thunderbird security update

https://access.redhat.com/errata/RHSA-2026:65160

CVE-2026-74934

CVE-2026-74935

CVE-2026-74939

CVE-2026-74940

CVE-2026-74941

CVE-2026-74942

CVE-2026-74945

CVE-2026-74946

CVE-2026-74948

CVE-2026-74953

CVE-2026-74957

CVE-2026-74959

CVE-2026-74960

CVE-2026-74962

CVE-2026-74963

CVE-2026-74964

CVE-2026-74965

CVE-2026-74967

CVE-2026-74971

CVE-2026-74972

CVE-2026-74973

CVE-2026-74974

CVE-2026-74976

CVE-2026-74987

CVE-2026-74990

+ RHSA-2026:65147 Important: microcode_ctl security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2026:65147

CVE-2025-31936

CVE-2025-35973

+ RHSA-2026:64823 Important: redis:6 security update

https://access.redhat.com/errata/RHSA-2026:64823

CVE-2026-66373

CVE-2026-81934

+ RHSA-2026:65606 Important: gpsd-minimal security update

https://access.redhat.com/errata/RHSA-2026:65606

CVE-2026-60122

+ RHSA-2026:65117 Important: opentelemetry-collector security update

https://access.redhat.com/errata/RHSA-2026:65117

CVE-2026-33818

CVE-2026-39820

CVE-2026-41178

CVE-2026-42499

CVE-2026-42504

CVE-2026-56853

CVE-2026-56858

CVE-2026-56859

CVE-2026-56860

CVE-2026-56862

+ RHSA-2026:64824 Important: redis security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2026:64824

CVE-2026-66373

CVE-2026-81934

+ RHSA-2026:64774 Important: python3.14-cryptography security update

https://access.redhat.com/errata/RHSA-2026:64774

CVE-2026-69248

CVE-2026-69249

+ iOS 26.6.2 and iPadOS 26.6.2 released

https://support.apple.com/en-us/100100

+ Google Chrome 153.0.8010.36/.37 released

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html

+ FreeBSD 14.5-RELEASE released

https://www.freebsd.org/releases/14.5R/relnotes/

+ Apache Tomcat Native 2.0.16, 1.3.9 released

https://tomcat.apache.org/native-doc/miscellaneous/changelog.html#2.0.16

https://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html#1.3.9

+ OpenLDAP-2.7.1, 2.6.15 released

https://www.openldap.org/software/release/changes.html

https://www.openldap.org/software/release/changes_lts.html

+ Postfix stable release 3.11.7 and legacy releases 3.10.14, 3.9.15, 3.8.21, 3.7.23, 3.6.21, 3.5.28 released

https://www.postfix.org/announcements/postfix-3.11.7.html

■Knot DNSの脆弱性情報が公開されました

https://jprs.jp/tech/security/2026-09-08-knotdns.html

VU#718077 UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot

https://www.kb.cert.org/vuls/id/718077

VU#859658 Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability

https://www.kb.cert.org/vuls/id/859658

VU#943094 ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability

https://www.kb.cert.org/vuls/id/943094

ニュース解説

スマホで法人代表者の実印、「商業登記リモート署名」開始　民間と競合も

https://xtech.nikkei.com/atcl/nxt/column/18/00001/12018/?ST=nxt_thmit_security

全日空商事「選べるe-GIFT」で不正交換、管理システムに第三者がアクセス

https://xtech.nikkei.com/atcl/nxt/column/18/00598/010900380/?ST=nxt_thmit_security