22日 木曜日、友引

+ RHSA-2026:87375 Important: kernel security update

https://access.redhat.com/errata/RHSA-2026:87375

CVE-2026-64114

CVE-2026-64266

CVE-2026-64572

CVE-2026-68202

CVE-2026-80536

CVE-2026-80590

CVE-2026-89777

+ RHSA-2026:87080 Important: php:7.4 security update

https://access.redhat.com/errata/RHSA-2026:87080

CVE-2025-1218

CVE-2025-14181

CVE-2026-6103

CVE-2026-91765

CVE-2026-91766

CVE-2026-91767

CVE-2026-91768

CVE-2026-91769

CVE-2026-92842

CVE-2026-93682

CVE-2026-109618

CVE-2026-109619

+ RHSA-2026:86982 Moderate: fetchmail security update

https://access.redhat.com/errata/RHSA-2026:86982

CVE-2026-94184

+ RHSA-2026:86907 Important: xorg-x11-server-Xwayland security update

https://access.redhat.com/errata/RHSA-2026:86907

CVE-2026-88812

CVE-2026-93516

CVE-2026-93517

CVE-2026-93518

CVE-2026-93519

CVE-2026-93520

CVE-2026-93521

CVE-2026-93523

+ RHSA-2026:86842 Important: librsvg2 security update

https://access.redhat.com/errata/RHSA-2026:86842

CVE-2026-96889

+ RHSA-2026:86594 Critical: .NET 8.0 security, bug fix, and enhancement update

https://access.redhat.com/errata/RHSA-2026:86594

CVE-2026-58280

CVE-2026-66822

CVE-2026-69651

CVE-2026-70159

CVE-2026-70175

CVE-2026-70179

CVE-2026-70181

CVE-2026-70183

CVE-2026-70186

CVE-2026-70188

CVE-2026-70196

CVE-2026-88092

CVE-2026-92707

CVE-2026-96222

CVE-2026-96225

CVE-2026-96230

CVE-2026-96231

CVE-2026-96233

CVE-2026-96236

CVE-2026-96237

CVE-2026-96238

+ Mozilla Foundation Security Advisory 2026-116 Security Vulnerabilities fixed in Firefox for Android 158.0.2

https://www.mozilla.org/en-US/security/advisories/mfsa2026-116/

CVE-2026-113470

+ ISC BIND 9.20.30 released

https://downloads.isc.org/isc/bind9/9.20.30/doc/arm/html/notes.html

+ FreeBSD-SA-26:73.caroot TLS certificate store update due to eMudhra compromise

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:73.caroot.asc

+ PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35 released

https://www.php.net/ChangeLog-8.php#8.5.12

https://www.php.net/ChangeLog-8.php#8.4.27

https://www.php.net/ChangeLog-8.php#8.3.36

https://www.php.net/ChangeLog-8.php#8.2.35

+ JVNVU#93110597 Apache Tomcatにおける複数の脆弱性（2026年10月20日）

https://jvn.jp/vu/JVNVU93110597/index.html

JVNVU#90998702 CISA ICS Advisory / ICS Medical Advisory（2026年10月20日）

https://jvn.jp/vu/JVNVU90998702/index.html

JVNVU#92078426 Xerj Console APIにおける認証回避の脆弱性

https://jvn.jp/vu/JVNVU92078426/index.html

ニュース解説

PHPの重大な脆弱性で緊急メンテナンス相次ぐ　さくらやCygames、pixivなど

https://xtech.nikkei.com/atcl/nxt/column/18/00001/12112/?ST=nxt_thmit_security

NECの委託先にサイバー攻撃、複数顧客でシステム障害と情報漏洩

https://xtech.nikkei.com/atcl/nxt/news/24/03431/?ST=nxt_thmit_security