興味を持った記事(2021年03月29日) - まっちゃだいふくの日記

セキュリティ

「OpenSSL」に2件の脆弱性、深刻度は“高” ～「OpenSSL 1.1.1k」への更新を - 窓の杜

OpenSSLの脆弱性（CVE-2021-3450、CVE-2021-3449）に関する注意喚起

OpenSSL Releases Security Update | CISA

【セキュリティニュース】「OpenSSL」に重要度「高」の複数脆弱性 - アップデートが公開（1ページ目 / 全1ページ）：Security NEXT

OpenSSLに複数の脆弱性、修正バージョンの適用を推奨 | ScanNetSecurity

OpenSSL Releases Security Update | CISA

Google Developers Japan: サイドチャネル攻撃への対策

Google Developers Japan: Spectre の影響を受けないウェブを作るための概念実証について

About the security content of iOS 14.4.2 and iPadOS 14.4.2 - Apple サポート

About the security content of iOS 12.5.2 - Apple サポート

About the security content of watchOS 7.3.3 - Apple サポート

Apple Releases Security Updates | CISA

iOSの14.4.2と12.5.2配信　「悪用された可能性のあるWebKitの重要なセキュリティアップデート」 - ITmedia Mobile

Apple fixes a iOS zero-day vulnerability actively used in attacks

iOS/iPadOS、watchOSにセキュリティアップデート～古いiPhone/iPadにも - 窓の杜

【セキュリティニュース】「iOS」などにゼロデイ脆弱性、アップデートが公開 - 旧機種向けにも（1ページ目 / 全1ページ）：Security NEXT

Apple、既に悪用された可能性のあるUXSS攻撃につながるゼロデイ脆弱性を修正した「iOS/iPadOS 14.4.2/12.5.2」および「watchOS 7.3.3」をリリース。

「iOS 14.4.2」「iPadOS 14.4.2」登場、WebKitに「悪用された可能性がある脆弱性」 - ケータイ Watch

iOS12.5.2とiPadOS 12.5.2が配信開始　iOS/iPadOS 14がインストールできないiPhone/iPad向け - こぼねみ

Release notes for Windows – Zoom Help Center

Release notes for macOS – Zoom Help Center

Release notes of 5.6.0 (536)
Changes to existing features

Enhancement to 3-way calling for Zoom Phone

Enhancement to MSI/GPO option: Auto Update

General features

Additional MSI/GPO options

-Enable Share Clipboard during remote control
-Hide incoming calls while in meeting
Meeting/webinar features

Enhanced device testing for Epic integration

Additional authentication option: Users in my account

Webinar features

Additional attendee view controls

Enhanced practice session and live webinar notifications

File transfer for webinar chat

Chat features

Enhanced search filter: @me mentions

Search in channel within channel options

Easier emoji selection

Phone features

Power Pack experience

Call monitoring for shared line groups

Update emergency address

UI enhancement for unknown location notification

Recover call history, voicemail and recordings

Bypass waiting room when elevating call to meeting

UI enhancements for calls forwarded through auto receptionists

Copy direct phone number

Resolved Issues

Resolved an issue with video virtual background regarding the video being flipped or rotated

Resolved an issue regarding sharing slides on an iPad used as a second monitor

Resolved an issue regarding removed webinar attendees trying to rejoin and incorrectly receiving message that they cannot rejoin due to declined registration

Resolved an issue for a subset of users regarding adding additional wildcard domains for authentication profiles

Resolved an issue for a subset of users regarding error 103033 when trying to join a meeting

Fixed an issue where the outbound caller ID was incorrect if the user’s default caller ID was set to a phone number that belonged to a shared line group

Security enhancements

Minor bug fixes

Thunderbird

無料のメールソフト「Thunderbird 78.9.0」が公開～5件の脆弱性を修正 - 窓の杜

Thunderbird — Release Notes (78.9.0) — Thunderbird

Security Vulnerabilities fixed in Thunderbird 78.9 — Mozilla

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird | CISA

無料のメールソフト「Thunderbird 78.9.0」が公開～5件の脆弱性を修正 - 窓の杜