19日 月曜日、大安

+ local interface connection reuse mixup

https://curl.se/docs/CVE-2026-107929.html

CVE-2026-107929

+ ■Windows DNSの脆弱性情報が公開されました（CVE-2026-83869、他57件）

https://jprs.jp/tech/security/2026-10-16-windowsdns.html

+ ■NSDの脆弱性情報が公開されました

https://jprs.jp/tech/security/2026-10-15-nsd.html

+ RHSA-2026:83657 Moderate: wireshark security update

https://access.redhat.com/errata/RHSA-2026:83657

CVE-2026-76880

CVE-2026-76886

CVE-2026-76919

CVE-2026-76927

+ RHSA-2026:83563 Important: rpcbind security update

https://access.redhat.com/errata/RHSA-2026:83563

CVE-2026-94640

+ Google Chrome 156.0.8078.35/.36, 155.0.8059.84/.85, 152.0.7977.169 released

https://chromereleases.googleblog.com/2026/10/early-stable-update-for-desktop_01549127219.html

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html

https://chromereleases.googleblog.com/2026/10/extended-stable-update-for-desktop_01598036246.html

+ Mozilla Firefox 158.0 released

https://www.firefox.com/en-US/firefox/158.0/releasenotes/

+ Mozilla Foundation Security Advisory 2026-106 Security Vulnerabilities fixed in Firefox 158

https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/

+ nginx 1.31.7, 1.30.6 released

https://nginx.org/en/CHANGES

https://nginx.org/en/CHANGES-1.30

+ Mozilla Foundation Security Advisory 2026-108 Security Vulnerabilities fixed in Firefox ESR 153.5

https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/

+ Mozilla Foundation Security Advisory 2026-107 Security Vulnerabilities fixed in Firefox ESR 115.43

https://www.mozilla.org/en-US/security/advisories/mfsa2026-107/

+ Mozilla Foundation Security Advisory 2026-109 Security Vulnerabilities fixed in Thunderbird 158

https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/

+ Mozilla Foundation Security Advisory 2026-110 Security Vulnerabilities fixed in Thunderbird 153.5

https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/

+ Mozilla Thunderbrid 158.0 released

https://www.thunderbird.net/en-US/thunderbird/158.0/releasenotes/

+ FreeBSD-SA-26:72.bhyve Multiple vulnerabilities in bhyve device models

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:72.bhyve.asc

+ FreeBSD-SA-26:71.sound TOCTOU race between sound(4) buffer resizing and mmap

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:71.sound.asc

+ FreeBSD-SA-26:70.tcp Remotely triggerable buffer overflow in tcp_rack

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:70.tcp.asc

+ Apache Tomcat 11.0.27, 10.1.61, 9.0.123 released

https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.27_(markt)

https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.61_(schultz)

https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.123_(remm)

VU#410595 Google BoringSSL Name Constraints Bypass in SAN Validation Logic

https://www.kb.cert.org/vuls/id/410595

VU#948176 Multiple TLS Libraries can Bypass Delegation Enforcement

https://www.kb.cert.org/vuls/id/948176

VU#166125 Bisheng has authentication bypass vulnerabilities

https://www.kb.cert.org/vuls/id/166125

JVNVU#96928590 CISA ICS Advisory / ICS Medical Advisory（2026年10月15日）

https://jvn.jp/vu/JVNVU96928590/index.html

JVNVU#90141693 Siemens製品に対するアップデート（2026年10月）

https://jvn.jp/vu/JVNVU90141693/index.html

「最後のネスペ試験」が迫る、頻出技術で押さえるネットワークの基礎 第5回

冗長化技術はネスペ試験での出題多数、STPやVRRPなど4技術を解説する

https://xtech.nikkei.com/atcl/nxt/column/18/03791/100700005/?ST=nxt_thmit_security

タイムズカー、本人確認書類画像を10月末までに全削除　確認後に即時消去

https://xtech.nikkei.com/atcl/nxt/news/24/03428/?ST=nxt_thmit_security