{"id":1809,"date":"2026-11-10T05:10:11","date_gmt":"2026-11-09T20:10:11","guid":{"rendered":"https:\/\/www.javable.jp\/blog\/?p=1809"},"modified":"2026-11-10T05:10:11","modified_gmt":"2026-11-09T20:10:11","slug":"security-weekly-report-2026-11-09","status":"publish","type":"post","link":"https:\/\/www.javable.jp\/blog\/1809.html","title":{"rendered":"\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u9031\u6b21\u7dcf\u62ec 2026-11-09"},"content":{"rendered":"<p>\u5bfe\u8c61\u671f\u9593\uff1a2026\u5e7411\u670802\u65e5 07:00\uff5e2026\u5e7411\u670809\u65e5 07:00\uff08\u65e5\u672c\u6642\u9593\uff09<\/p><p>\u672c\u8a18\u4e8b\u306f\u516c\u958b\u60c5\u5831\u3092\u57fa\u306bAI\u3067\u81ea\u52d5\u4f5c\u6210\u3057\u3066\u3044\u307e\u3059\u3002\u5bfe\u5fdc\u524d\u306b\u5404\u9805\u76ee\u306e\u4e00\u6b21\u60c5\u5831\u3092\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002<\/p><p>\u751f\u6210\u30ea\u30af\u30a8\u30b9\u30c8\u958b\u59cb\uff1a2026-11-09T11:02:41.896408+09:00\uff0f\u5fdc\u7b54\u53d7\u4fe1\uff1a2026-11-09T11:03:40.274408+09:00<\/p><h2>1. \u5bfe\u8c61\u671f\u9593\u3068\u65e5\u6b21\u8a18\u4e8b\u306e\u691c\u8a3c\u7bc4\u56f2<\/h2>\n\n<p><strong>\u9031\u6b21\u30ec\u30dd\u30fc\u30c8\u65e5\u4ed8\uff1a<\/strong>2026\u5e7411\u67089\u65e5\uff08\u6708\uff09<br>\n<strong>\u5bfe\u8c61\u671f\u9593\uff1a<\/strong>2026\u5e7411\u67082\u65e5\uff08\u6708\uff0907:00\u4ee5\u4e0a\u300111\u67089\u65e5\uff08\u6708\uff0907:00\u672a\u6e80\uff08\u65e5\u672c\u6642\u9593\uff09<br>\n<strong>\u691c\u8a3c\u5bfe\u8c61\uff1a<\/strong>\u63d0\u4f9b\u3055\u308c\u305f\u65e5\u6b21\u8a18\u4e8b6\u65e5\u5206\u3068\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5206\u91ce\u5225\u306e\u8abf\u67fb\u8a18\u9332<\/p>\n\n<p>\u4eca\u9031\u306f\u3001<strong>\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305fAirbyte\u306e\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u3001APT\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u691c\u8a3c\u56de\u907f\u3001WooCommerce\u95a2\u9023\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3001AWS\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5206\u96e2\u30fb\u4eee\u60f3\u5316\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027<\/strong>\u306a\u3069\u3001\u904b\u7528\u4e0a\u91cd\u8981\u306a\u60c5\u5831\u304c\u8907\u6570\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n<p>\u4eca\u56de\u306e\u9031\u6b21\u691c\u8a3c\u3067\u306f\u3001\u4fdd\u5b58\u6e08\u307f\u65e5\u6b21\u8a18\u4e8b\u3092\u7167\u5408\u3059\u308b\u3068\u3068\u3082\u306b\u3001JVN\u3001Debian\u3001Ubuntu\u3001AWS\u3001WooCommerce\u3001Oracle\u306a\u3069\u306e\u516c\u5f0f\u8cc7\u6599\u3092\u6539\u3081\u3066\u53d6\u5f97\u3057\u307e\u3057\u305f\u3002\u65e5\u6b21\u8a18\u4e8b\u306b\u63b2\u8f09\u3055\u308c\u3066\u3044\u306a\u3044\u91cd\u8981\u60c5\u5831\u306b\u3064\u3044\u3066\u306f\u3001\u500b\u5225\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306e\u672c\u6587\u3092\u78ba\u8a8d\u3057\u305f\u3046\u3048\u3067\u3001\u65e5\u6b21\u8a18\u4e8b\u3078\u306e\u8ffd\u8a18\u304c\u5fc5\u8981\u304b\u3092\u8a55\u4fa1\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p><strong>\u691c\u8a3c\u3067\u304d\u305f\u65e5\u6b21\u8a18\u4e8b\uff1a<\/strong>11\u67084\u65e5\uff5e9\u65e5\u4ed8\u306e6\u65e5\u5206\u3067\u3059\u300211\u67083\u65e5\u4ed8\u306f\u4fdd\u5b58\u8a18\u4e8b\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u63b2\u8f09\u5185\u5bb9\u3092\u8a55\u4fa1\u3057\u3066\u3044\u307e\u305b\u3093\u3002\u307e\u305f\u3001\u4fdd\u5b58\u8a18\u4e8b\u3068\u5b9f\u969b\u306b\u516c\u958b\u3055\u308c\u305f\u8a18\u4e8b\u306e\u4e00\u81f4\u306f\u672a\u78ba\u8a8d\u3067\u3059\u3002<\/p>\n\n<p>\u4ee5\u4e0b\u3067\u300c\u672a\u63b2\u8f09\u300d\u3068\u3059\u308b\u3082\u306e\u306f\u3001\u63d0\u4f9b\u3055\u308c\u305f\u65e5\u6b21\u672c\u6587\u306b\u8a18\u8f09\u3092\u78ba\u8a8d\u3067\u304d\u306a\u304b\u3063\u305f\u6848\u4ef6\u3067\u3059\u3002\u5b9f\u969b\u306e\u516c\u958b\u6e08\u307f\u8a18\u4e8b\u306b\u63b2\u8f09\u3055\u308c\u3066\u3044\u306a\u304b\u3063\u305f\u3053\u3068\u307e\u3067\u65ad\u5b9a\u3059\u308b\u3082\u306e\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n<h2>2. \u4eca\u9031\u306e\u91cd\u8981\u6848\u4ef6<\/h2>\n\n<h3>2-1. \u3010\u6700\u512a\u5148\u3011Airbyte\uff1a\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u306e\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c<\/h3>\n\n<p><strong>\u8b58\u5225\u5b50\uff1a<\/strong>JVN#12040144\u3001GHSA-g35w-6r6v-h4r7<br>\n<strong>JVN\u63b2\u8f09\uff1a<\/strong>2026\u5e7411\u67084\u65e512:00\uff08\u65e5\u672c\u6642\u9593\uff09<br>\n<strong>\u958b\u767a\u5143\u306e\u521d\u56de\u516c\u8868\uff1a<\/strong>2026\u5e7410\u670817\u65e5<br>\n<strong>\u65e5\u6b21\u63b2\u8f09\uff1a<\/strong>11\u67085\u65e5\u4ed8\u306b\u63b2\u8f09\u6e08\u307f<\/p>\n\n<p>Airbyte\u306eConnector Builder\u304a\u3088\u3073Manifest Server\u306b\u3001\u610f\u56f3\u3057\u306a\u3044\u30af\u30e9\u30b9\u306e\u8aad\u307f\u8fbc\u307f\u3092\u901a\u3058\u3066\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p>JVN\u306f<strong>\u5b9f\u969b\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b<\/strong>\u3068\u660e\u8a18\u3057\u3066\u3044\u307e\u3059\u3002\u5f71\u97ff\u7bc4\u56f2\u306fJVN\u3067\u306fAirbyte 1.7.0\uff5e2.1.0\u3001\u958b\u767a\u5143\u3067\u306f2.2.0\u672a\u6e80\u3068\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u653b\u6483\u6761\u4ef6\u306f\u69cb\u6210\u306b\u3088\u3063\u3066\u7570\u306a\u308a\u307e\u3059\u3002Airbyte 2.x\u3067\u306f\u4e00\u5b9a\u306eReader\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304c\u60aa\u7528\u3067\u304d\u3001\u5f93\u6765\u306eHelm Chart\u3092\u4f7f\u3063\u305fAirbyte 1.x\u3067\u306f\u3001\u8a72\u5f53\u30b5\u30fc\u30d3\u30b9\u306b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308c\u3070\u8a8d\u8a3c\u4e0d\u8981\u3067\u653b\u6483\u53ef\u80fd\u306a\u69cb\u6210\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p>\u653b\u6483\u304c\u6210\u7acb\u3059\u308b\u3068\u3001\u30b3\u30f3\u30c6\u30ca\u5185\u3067\u30b3\u30de\u30f3\u30c9\u304c\u5b9f\u884c\u3055\u308c\u3001\u63a5\u7d9a\u5148\u30b7\u30b9\u30c6\u30e0\u306e\u8a8d\u8a3c\u60c5\u5831\u3084\u30c7\u30fc\u30bf\u304c\u5371\u967a\u306b\u3055\u3089\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p><strong>\u5bfe\u7b56\uff1a<\/strong>Airbyte 2.2.0\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u958b\u767a\u5143\u306f1.x\u3078\u306e\u4fee\u6b63\u63d0\u4f9b\u3092\u4e88\u5b9a\u3057\u3066\u3044\u307e\u305b\u3093\u3002\u66f4\u65b0\u307e\u3067\u306e\u9593\u306fConnector Builder\u306a\u3069\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5236\u9650\u3057\u3001\u4e0d\u5be9\u306a\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u3084\u8a8d\u8a3c\u60c5\u5831\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8abf\u67fb\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p><strong>CVSS\uff1a<\/strong>JVN\u8a55\u4fa1\u306fv4.0\u30678.7\u3001v3.0\u30678.8\u3067\u3059\u3002<\/p>\n\n<p><strong>\u5bfe\u5fdc\u512a\u5148\u5ea6\uff1a\u6700\u512a\u5148\u3002<\/strong>\u5b9f\u969b\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3001\u69cb\u6210\u306b\u3088\u3063\u3066\u306f\u8a8d\u8a3c\u306a\u3057\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306a\u305f\u3081\u3067\u3059\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/jvn.jp\/jp\/JVN12040144\/index.html\">JVN#12040144<\/a>\u3001<a href=\"https:\/\/github.com\/airbytehq\/airbyte\/security\/advisories\/GHSA-g35w-6r6v-h4r7\">Airbyte\u516c\u5f0f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea<\/a>\u3002 <a href=\"https:\/\/jvn.jp\/jp\/JVN12040144\/index.html\">JVN#12040144: Airbyte\u306b\u304a\u3051\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u53ef\u80fd\u306a\u8106\u5f31\u6027<\/a><\/p>\n\n<h3>2-2. \u3010\u6700\u512a\u5148\u3011APT\uff1a\u691c\u8a3c\u6e08\u307f\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u7f6e\u304d\u63db\u3048\u306b\u3088\u308broot\u6a29\u9650\u3067\u306e\u30b3\u30fc\u30c9\u5b9f\u884c<\/h3>\n\n<p><strong>\u8b58\u5225\u5b50\uff1a<\/strong>CVE-2026-109518\u3001DSA-6607-1\u3001USN-8996-1<br>\n<strong>Debian\u544a\u77e5\uff1a<\/strong>2026\u5e7411\u67084\u65e521:07:32\uff08\u65e5\u672c\u6642\u9593\uff09<br>\n<strong>Ubuntu\u544a\u77e5\uff1a<\/strong>2026\u5e7411\u67084\u65e5\uff08\u6642\u523b\u672a\u78ba\u8a8d\uff09<br>\n<strong>\u65e5\u6b21\u63b2\u8f09\uff1a<\/strong>11\u67087\u65e5\u4ed8\u306bAWS\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306e\u66f4\u65b0\u3068\u3057\u3066\u63b2\u8f09\u6e08\u307f<\/p>\n\n<p>Debian\u3068Ubuntu\u3067\u4f7f\u7528\u3055\u308c\u308bAPT\u30d1\u30c3\u30b1\u30fc\u30b8\u30de\u30cd\u30fc\u30b8\u30e3\u30fc\u306b\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u691c\u8a3c\u3092\u56de\u907f\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u8106\u5f31\u6027\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n<p>HTTP\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3068\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u518d\u958b\u51e6\u7406\u306e\u554f\u984c\u3092\u5229\u7528\u3057\u3001\u901a\u4fe1\u7d4c\u8def\u4e0a\u306e\u653b\u6483\u8005\u304c\u691c\u8a3c\u5f8c\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u4e0d\u6b63\u306a\u5185\u5bb9\u306b\u7f6e\u304d\u63db\u3048\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p>\u4e0d\u6b63\u306a\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u308b\u3068\u3001\u30e1\u30f3\u30c6\u30ca\u30fc\u30b9\u30af\u30ea\u30d7\u30c8\u306a\u3069\u3092\u901a\u3058\u3066root\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p><strong>\u4e3b\u306a\u653b\u6483\u6761\u4ef6\uff1a<\/strong>HTTP\u3092\u5229\u7528\u3057\u305f\u30d1\u30c3\u30b1\u30fc\u30b8\u53d6\u5f97\u3001\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u518d\u8a66\u884c\u3001\u901a\u4fe1\u7d4c\u8def\u3078\u306e\u653b\u6483\u8005\u306e\u4ecb\u5165\u304c\u95a2\u4fc2\u3057\u307e\u3059\u3002<\/p>\n\n<p><strong>\u78ba\u8a8d\u3067\u304d\u305f\u4fee\u6b63\u7248\uff1a<\/strong><\/p>\n\n<table>\n<thead>\n<tr><th>\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3<\/th><th>\u4fee\u6b63\u6e08\u307fAPT<\/th><\/tr>\n<\/thead>\n<tbody>\n<tr><td>Debian 13<\/td><td>3.0.4<\/td><\/tr>\n<tr><td>Ubuntu 26.10<\/td><td>3.3.3ubuntu0.1<\/td><\/tr>\n<tr><td>Ubuntu 26.04 LTS<\/td><td>3.2.1ubuntu0.1<\/td><\/tr>\n<tr><td>Ubuntu 24.04 LTS<\/td><td>2.8.4ubuntu0.1<\/td><\/tr>\n<tr><td>Ubuntu 22.04 LTS<\/td><td>2.4.15ubuntu0.1<\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<p>Ubuntu\u306e\u65e7\u7cfb\u5217\u306b\u3064\u3044\u3066\u3082\u3001\u30b5\u30dd\u30fc\u30c8\u6761\u4ef6\u306b\u5fdc\u3058\u305f\u4fee\u6b63\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u6848\u5185\u3055\u308c\u3066\u3044\u307e\u3059\u3002Debian 12\u306a\u3069\u306e\u74b0\u5883\u306f\u3001\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c8\u30e9\u30c3\u30ab\u30fc\u3068\u5b9f\u969b\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u7167\u5408\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p><strong>\u5bfe\u7b56\uff1a<\/strong>APT\u306e\u4fee\u6b63\u7248\u3092\u9069\u7528\u3057\u3066\u304f\u3060\u3055\u3044\u3002AWS\u306f\u3001\u66f4\u65b0\u6642\u306e\u518d\u8a66\u884c\u3092\u7121\u52b9\u5316\u3059\u308b\u305f\u3081\u3001APT\u306e\u66f4\u65b0\u30fb\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u6642\u306b\u300cAcquire::Retries=0\u300d\u3092\u6307\u5b9a\u3059\u308b\u65b9\u6cd5\u3092\u6848\u5185\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>EC2\u306a\u3069\u306e\u4eee\u60f3\u30de\u30b7\u30f3\u3060\u3051\u3067\u306a\u304f\u3001\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u306eLinux\u30b5\u30fc\u30d0\u30fc\u3084\u3001Ubuntu\u30fbDebian\u3092\u30d9\u30fc\u30b9\u3068\u3059\u308b\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3082\u78ba\u8a8d\u5bfe\u8c61\u3067\u3059\u3002<\/p>\n\n<p><strong>\u5bfe\u5fdc\u512a\u5148\u5ea6\uff1a\u6700\u512a\u5148\u3002<\/strong>\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u4fe1\u983c\u6027\u691c\u8a3c\u3092\u56de\u907f\u3057\u3001OS\u5168\u4f53\u306e\u4fb5\u5bb3\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3067\u3059\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00526.html\">Debian DSA-6607-1<\/a>\u3001<a href=\"https:\/\/ubuntu.com\/security\/notices\/USN-8996-1\">Ubuntu USN-8996-1<\/a>\u3001<a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-172-aws\/\">AWS Security Bulletin 2026-172-AWS<\/a>\u3002 <a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00526.html\">[SECURITY] [DSA 6607-1] apt security update<\/a><\/p>\n\n<h3>2-3. \u3010\u9ad8\u3011WooCommerce\u30fbWooPayments\uff1a\u6c7a\u6e08\u95a2\u9023\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0<\/h3>\n\n<p><strong>\u5bfe\u8c61\uff1a<\/strong>WooCommerce\u3001WooPayments<br>\n<strong>\u516c\u8868\u65e5\uff1a<\/strong>2026\u5e7411\u67083\u65e5\u30fb4\u65e5\uff08\u516c\u958b\u6642\u523b\u30fb\u30bf\u30a4\u30e0\u30be\u30fc\u30f3\u672a\u78ba\u8a8d\uff09<br>\n<strong>\u65e5\u6b21\u63b2\u8f09\uff1a<\/strong>\u63d0\u4f9b\u3055\u308c\u305f\u65e5\u6b21\u672c\u6587\u3067\u306f\u78ba\u8a8d\u3067\u304d\u305a<\/p>\n\n<p>WordPress\u306eEC\u30b5\u30a4\u30c8\u3067\u5229\u7528\u3055\u308c\u308bWooCommerce\u3068WooPayments\u306b\u3064\u3044\u3066\u3001\u958b\u767a\u5143\u304c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002<\/p>\n\n<p><strong>WooPayments\uff1a<\/strong>11\u67083\u65e5\u3001\u30b5\u30d6\u30b9\u30af\u30ea\u30d7\u30b7\u30e7\u30f3\u6a5f\u80fd\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u554f\u984c\u306b\u5bfe\u3059\u308b\u8ffd\u52a0\u4fee\u6b63\u304c\u6848\u5185\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306f2026\u5e748\u6708\u306b\u516c\u8868\u3055\u308c\u305f\u4fee\u6b63\u3092\u62e1\u5f35\u3059\u308b\u3082\u306e\u3067\u3059\u3002<\/p>\n\n<p>\u4fee\u6b63\u7248\u306f\u8907\u6570\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u7cfb\u5217\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u4f8b\u3048\u3070\u300111.2.0\u306f11.2.1\u300111.1.0\u306f11.1.1\u300111.0.0\uff5e11.0.1\u306f11.0.2\u3078\u306e\u66f4\u65b0\u304c\u6848\u5185\u3055\u308c\u3066\u3044\u307e\u3059\u30029.0.0\u672a\u6e80\u306b\u3064\u3044\u3066\u306f11.2.1\u3078\u306e\u66f4\u65b0\u304c\u6848\u5185\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p><strong>WooCommerce\uff1a<\/strong>11\u67084\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b911.2.2\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n<p>\u4e3b\u306a\u4fee\u6b63\u5bfe\u8c61\u306b\u306f\u3001Store API\u3001REST API\u30ad\u30fc\u306b\u3088\u308b\u8a8d\u8a3c\u3001\u7ba1\u7406\u7528\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u6ce8\u6587\u4fdd\u5b58\u3068\u6c7a\u6e08\u51e6\u7406\u3001\u5546\u54c1\u5c5e\u6027\u306e\u691c\u8a3c\u306a\u3069\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n\n<p>11.2.2\u306b\u306f\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u66f4\u65b0\u3082\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u4e21\u88fd\u54c1\u3068\u3082\u3001\u516c\u5f0f\u544a\u77e5\u3060\u3051\u3067\u306f\u500b\u3005\u306e\u554f\u984c\u306e\u653b\u6483\u6761\u4ef6\u3084\u60aa\u7528\u5b9f\u7e3e\u3092\u78ba\u5b9a\u3067\u304d\u307e\u305b\u3093\u3002\u6c7a\u6e08\u60c5\u5831\u306e\u6d41\u51fa\u3084\u4e0d\u6b63\u8acb\u6c42\u304c\u5b9f\u969b\u306b\u767a\u751f\u3057\u305f\u3068\u3044\u3046\u610f\u5473\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n<p><strong>\u5bfe\u7b56\uff1a<\/strong>\u5229\u7528\u4e2d\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u78ba\u8a8d\u3057\u3001\u8a72\u5f53\u3059\u308b\u4fee\u6b63\u7248\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002WooCommerce\u3067\u306f\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u66f4\u65b0\u5f8c\u3001\u6ce8\u6587\u30fb\u6c7a\u6e08\u51e6\u7406\u3068\u5916\u90e8API\u9023\u643a\u306e\u52d5\u4f5c\u78ba\u8a8d\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n<p><strong>\u5bfe\u5fdc\u512a\u5148\u5ea6\uff1a\u9ad8\u3002<\/strong>\u8a8d\u8a3c\u3001\u6ce8\u6587\u3001\u6c7a\u6e08\u306b\u95a2\u4fc2\u3059\u308b\u6a5f\u80fd\u306e\u4fee\u6b63\u3067\u3042\u308a\u3001EC\u30b5\u30a4\u30c8\u306e\u696d\u52d9\u51e6\u7406\u306b\u76f4\u63a5\u5f71\u97ff\u3059\u308b\u305f\u3081\u3067\u3059\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/developer.woocommerce.com\/2026\/11\/03\/security-update-for-woopayments\/\">WooPayments Security Update<\/a>\u3001<a href=\"https:\/\/developer.woocommerce.com\/2026\/11\/04\/woocommerce-11-2-2-release-notes\/\">WooCommerce 11.2.2 Release Notes<\/a>\u3002 <a href=\"https:\/\/developer.woocommerce.com\/2026\/11\/03\/security-update-for-woopayments\/\">Security update for WooPayments Advisories \u2013 The WooCommerce Developer Blog<\/a><\/p>\n\n<h3>2-4. \u3010\u9ad8\u3011Amazon EKS\uff1aNetworkPolicy\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u56de\u907f<\/h3>\n\n<p><strong>\u8b58\u5225\u5b50\uff1a<\/strong>CVE-2026-122266\u30012026-170-AWS<br>\n<strong>\u516c\u8868\u65e5\u6642\uff1a<\/strong>2026\u5e7411\u67085\u65e506:30\uff08\u65e5\u672c\u6642\u9593\uff09<br>\n<strong>\u65e5\u6b21\u63b2\u8f09\uff1a<\/strong>11\u67085\u65e5\u4ed8\u306e\u63d0\u4f9b\u672c\u6587\u3067\u306f\u78ba\u8a8d\u3067\u304d\u305a<\/p>\n\n<p>Amazon EKS\u306eNetwork Policy Agent\u306b\u3001eBPF\u306e\u63a5\u7d9a\u8ffd\u8de1\u72b6\u614b\u306e\u5206\u96e2\u304c\u4e0d\u9069\u5207\u306a\u554f\u984c\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n<p>\u8a8d\u8a3c\u6e08\u307f\u306e\u96a3\u63a5\u30e6\u30fc\u30b6\u30fc\u304c\u3001\u540c\u4e00\u30db\u30b9\u30c8\u4e0a\u306ePod\u306b\u5bfe\u3059\u308bKubernetes NetworkPolicy\u306e\u53d7\u4fe1\u901a\u4fe1\u5236\u9650\u3092\u56de\u907f\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p><strong>\u5f71\u97ff\u30d0\u30fc\u30b8\u30e7\u30f3\uff1a<\/strong><\/p>\n\n<ul>\n<li>aws-network-policy-agent 1.3.7\u672a\u6e80<\/li>\n<li>Amazon VPC CNI Managed Add-on 1.22.3\u672a\u6e80<\/li>\n<\/ul>\n\n<p><strong>\u4fee\u6b63\u7248\uff1a<\/strong>aws-network-policy-agent 1.3.7\u3001Amazon VPC CNI 1.22.3\u3002<\/p>\n\n<p>AWS\u306f\u6709\u52b9\u306a\u56de\u907f\u7b56\u304c\u306a\u3044\u3068\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p><strong>\u5bfe\u5fdc\u512a\u5148\u5ea6\uff1a\u9ad8\u3002<\/strong>\u7279\u306b\u8907\u6570\u306e\u5229\u7528\u8005\u3084\u696d\u52d9\u3092\u540c\u3058Kubernetes\u57fa\u76e4\u3067\u5b9f\u884c\u3057\u3001NetworkPolicy\u306b\u3088\u308b\u5206\u96e2\u306b\u4f9d\u5b58\u3059\u308b\u74b0\u5883\u3067\u91cd\u8981\u3067\u3059\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-170-aws\/\">AWS Security Bulletin 2026-170-AWS<\/a>\u3002 <a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-170-aws\/\">CVE-2026-122266 &#8211; Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS<\/a><\/p>\n\n<h3>2-5. \u3010\u9ad8\u3011Firecracker\uff1a\u30b2\u30b9\u30c8\u304b\u3089\u30db\u30b9\u30c8\u30d7\u30ed\u30bb\u30b9\u30e1\u30e2\u30ea\u3078\u306e\u30a2\u30af\u30bb\u30b9<\/h3>\n\n<p><strong>\u8b58\u5225\u5b50\uff1a<\/strong>CVE-2026-122192\u30012026-169-AWS<br>\n<strong>\u516c\u8868\u65e5\u6642\uff1a<\/strong>2026\u5e7411\u67085\u65e504:30\uff08\u65e5\u672c\u6642\u9593\uff09<br>\n<strong>\u65e5\u6b21\u63b2\u8f09\uff1a<\/strong>11\u67085\u65e5\u4ed8\u306e\u63d0\u4f9b\u672c\u6587\u3067\u306f\u78ba\u8a8d\u3067\u304d\u305a<\/p>\n\n<p>Firecracker\u306b\u3001\u7279\u5b9a\u306e\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u5fa9\u5143\u69cb\u6210\u3067\u3001\u30b2\u30b9\u30c8\u5185\u306eroot\u30e6\u30fc\u30b6\u30fc\u304cFirecracker\u30d7\u30ed\u30bb\u30b9\u306e\u30e1\u30e2\u30ea\u3092\u8aad\u307f\u66f8\u304d\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u8106\u5f31\u6027\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n<p><strong>\u5f71\u97ff\u30d0\u30fc\u30b8\u30e7\u30f3\uff1a<\/strong>Firecracker 0.23.0\uff5e1.16.1\u3002<\/p>\n\n<p>\u653b\u6483\u306b\u306f\u3001File memory backend\u3092\u4f7f\u7528\u3057\u3001balloon\u307e\u305f\u306fvirtio-mem\u30c7\u30d0\u30a4\u30b9\u3092\u5099\u3048\u308bVM\u3092\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u304b\u3089\u5fa9\u5143\u3059\u308b\u69cb\u6210\u306a\u3069\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n<p><strong>\u4fee\u6b63\u7248\uff1a<\/strong>Firecracker 1.16.2\u30011.17.0\u3002<\/p>\n\n<p>AWS\u306b\u3088\u308b\u3068\u3001AWS Lambda\u3092\u542b\u3080AWS\u30b5\u30fc\u30d3\u30b9\u306f\u5f71\u97ff\u3092\u53d7\u3051\u305a\u3001\u5229\u7528\u8005\u5074\u306e\u5bfe\u5fdc\u306f\u4e0d\u8981\u3067\u3059\u3002<\/p>\n\n<p><strong>\u5bfe\u5fdc\u512a\u5148\u5ea6\uff1a\u9ad8\u3002<\/strong>Firecracker\u3092\u76f4\u63a5\u904b\u7528\u3059\u308b\u74b0\u5883\u3067\u306f\u4eee\u60f3\u5316\u5883\u754c\u306e\u4fb5\u5bb3\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u4e00\u65b9\u3001AWS\u304c\u5f71\u97ff\u306a\u3057\u3068\u3059\u308b\u30de\u30cd\u30fc\u30b8\u30c9\u30b5\u30fc\u30d3\u30b9\u5229\u7528\u8005\u306b\u3001\u540c\u3058\u66f4\u65b0\u4f5c\u696d\u3092\u6c42\u3081\u308b\u5fc5\u8981\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-169-aws\/\">AWS Security Bulletin 2026-169-AWS<\/a>\u3002 <a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-169-aws\/\">CVE-2026-122192: Guest Access to Firecracker Process Memory After a Failed Memory Discard<\/a><\/p>\n\n<h2>3. \u65e5\u6b21\u8a18\u4e8b\u306e\u63b2\u8f09\u6f0f\u308c\u30fb\u8a02\u6b63\u30fb\u5206\u6790\u306e\u88dc\u8db3<\/h2>\n\n<h3>3-1. \u91cd\u8981\u60c5\u5831\u306e\u672a\u63b2\u8f09\uff1aWooCommerce\u95a2\u9023\u306e2\u4ef6<\/h3>\n\n<p><strong>\u8a72\u5f53\u65e5\u6b21\uff1a<\/strong>11\u67084\u65e5\u4ed8\u300111\u67085\u65e5\u4ed8<\/p>\n\n<p>\u63d0\u4f9b\u3055\u308c\u305f\u65e5\u6b21\u8a18\u4e8b\u3067\u306f\u3001WordPress\u672c\u4f53\u3068\u4e00\u90e8\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u60c5\u5831\u3092\u6271\u3063\u3066\u3044\u307e\u3059\u304c\u3001WooPayments\u306e11\u67083\u65e5\u4ed8\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u544a\u77e5\u3001\u304a\u3088\u3073WooCommerce\u306e11\u67084\u65e5\u4ed8\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u306f\u78ba\u8a8d\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n\n<p>\u958b\u767a\u5143\u306e\u500b\u5225\u8cc7\u6599\u3092\u518d\u78ba\u8a8d\u3057\u305f\u7d50\u679c\u3001\u4e21\u6848\u4ef6\u306b\u306f\u5b9f\u969b\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u7279\u306bWooPayments\u306f\u65e2\u5b58\u306e\u4fee\u6b63\u3092\u62e1\u5f35\u3057\u305f\u3082\u306e\u3067\u3001WooCommerce 11.2.2\u306fAPI\u8a8d\u8a3c\u3084\u6c7a\u6e08\u51e6\u7406\u306b\u95a2\u4fc2\u3059\u308b\u5909\u66f4\u3092\u542b\u307f\u307e\u3059\u3002<\/p>\n\n<p><strong>\u8a55\u4fa1\uff1a<\/strong>\u91cd\u8981\u306a\u672a\u63b2\u8f09\u6848\u4ef6\u3067\u3059\u3002\u305f\u3060\u3057\u3001\u516c\u8868\u6642\u523b\u3068\u30bf\u30a4\u30e0\u30be\u30fc\u30f3\u3092\u78ba\u8a8d\u3067\u304d\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u5404\u65e5\u6b21\u8a18\u4e8b\u306e07:00\u5883\u754c\u306b\u5bfe\u3059\u308b\u53b3\u5bc6\u306a\u63b2\u8f09\u6f0f\u308c\u5224\u5b9a\u306f\u4fdd\u7559\u3057\u307e\u3059\u3002<\/p>\n\n<h3>3-2. \u91cd\u8981\u60c5\u5831\u306e\u672a\u63b2\u8f09\uff1aEKS Network Policy Agent\u3068Firecracker<\/h3>\n\n<p><strong>\u8a72\u5f53\u65e5\u6b21\uff1a<\/strong>11\u67085\u65e5\u4ed8<\/p>\n\n<p>\u4e21\u6848\u4ef6\u306b\u3064\u3044\u3066\u306fAWS\u304c\u516c\u8868\u3057\u305f\u65e5\u6642\u3092\u78ba\u8a8d\u3067\u304d\u3001\u5bfe\u8c61\u306e\u65e5\u6b21\u671f\u9593\u306b\u542b\u307e\u308c\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002<\/p>\n\n<p>\u63d0\u4f9b\u3055\u308c\u305f11\u67085\u65e5\u4ed8\u8a18\u4e8b\u3067\u306f\u3001AWS\u306b\u3064\u3044\u3066\u5bfe\u8c61\u671f\u9593\u5185\u306e\u65b0\u898f\u91cd\u8981\u60c5\u5831\u3092\u78ba\u8a8d\u3067\u304d\u306a\u304b\u3063\u305f\u65e8\u304c\u8a18\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u4e00\u65b9\u3001\u4eca\u56de\u518d\u78ba\u8a8d\u3057\u305fAWS\u516c\u5f0f\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3067\u306f\u3001EKS\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u56de\u907f\u3068Firecracker\u306e\u30e1\u30e2\u30ea\u30a2\u30af\u30bb\u30b9\u554f\u984c\u304c\u516c\u8868\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p><strong>\u8a55\u4fa1\uff1a<\/strong>\u5bfe\u8c61\u671f\u9593\u5185\u306e\u516c\u8868\u3092\u78ba\u8a8d\u3067\u304d\u305f\u91cd\u8981\u306a\u672a\u63b2\u8f09\u6848\u4ef6\u3067\u3059\u3002\u63d0\u4f9b\u3055\u308c\u305f\u65e5\u6b21\u8a18\u4e8b\u3078\u306e\u8ffd\u8a18\u5019\u88dc\u3068\u3057\u3066\u512a\u5148\u5ea6\u304c\u9ad8\u3044\u3068\u5224\u65ad\u3057\u307e\u3059\u3002<\/p>\n\n<h3>3-3. \u5206\u6790\u306e\u88dc\u8db3\uff1aAPT\u306e\u30d9\u30f3\u30c0\u30fc\u5225\u4fee\u6b63\u72b6\u6cc1<\/h3>\n\n<p><strong>\u8a72\u5f53\u65e5\u6b21\uff1a<\/strong>11\u67087\u65e5\u4ed8<\/p>\n\n<p>\u65e5\u6b21\u8a18\u4e8b\u306b\u306f\u3001\u653b\u6483\u6761\u4ef6\u3001root\u6a29\u9650\u3067\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3001\u30b3\u30f3\u30c6\u30ca\u66f4\u65b0\u3001Ubuntu\u306e\u4fee\u6b63\u7248\u304c\u65e2\u306b\u8a18\u8f09\u3055\u308c\u3066\u3044\u307e\u3057\u305f\u3002<\/p>\n\n<p>\u305d\u306e\u305f\u3081\u3001\u3053\u308c\u3089\u3092\u65b0\u3057\u3044\u5206\u6790\u88dc\u8db3\u3068\u3057\u3066\u91cd\u8907\u8a08\u4e0a\u3057\u307e\u305b\u3093\u3002<\/p>\n\n<p>\u4eca\u56de\u8ffd\u52a0\u3067\u78ba\u8a8d\u3067\u304d\u305f\u5185\u5bb9\u306f\u3001Debian\u306e\u516c\u5f0f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u544a\u77e5\u306b\u304a\u3051\u308b\u516c\u958b\u65e5\u6642\u3068\u4fee\u6b63\u7248\u3001\u304a\u3088\u3073Ubuntu\u306e\u516c\u5f0fUSN\u306b\u3088\u308b\u5bfe\u8c61\u7cfb\u5217\u306e\u78ba\u8a8d\u3067\u3059\u3002<\/p>\n\n<p><strong>\u88dc\u8db3\u5185\u5bb9\uff1a<\/strong>APT\u306e\u8106\u5f31\u6027\u306fAWS\u4e0a\u306eUbuntu\u30fbDebian\u3060\u3051\u306e\u554f\u984c\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002Debian\u3068Ubuntu\u306e\u516c\u5f0f\u30d1\u30c3\u30b1\u30fc\u30b8\u63d0\u4f9b\u5143\u306b\u3088\u308b\u4fee\u6b63\u60c5\u5831\u3092\u57fa\u6e96\u306b\u3001\u5404\u74b0\u5883\u306e\u9069\u7528\u72b6\u6cc1\u3092\u5224\u65ad\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<h3>3-4. \u5206\u6790\u306e\u88dc\u8db3\uff1aSHIRASAGI\u306e\u653b\u6483\u6761\u4ef6<\/h3>\n\n<p><strong>\u8a72\u5f53\u65e5\u6b21\uff1a<\/strong>11\u67086\u65e5\u4ed8<\/p>\n\n<p>\u65e5\u6b21\u8a18\u4e8b\u3067\u306f\u3001SHIRASAGI\u306eOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306b\u3064\u3044\u3066\u3001\u5f71\u97ff\u30d0\u30fc\u30b8\u30e7\u30f3\u3001\u4fee\u6b63\u7248\u3001CVSS\u3001\u60f3\u5b9a\u3055\u308c\u308b\u5f71\u97ff\u3092\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u4eca\u56de\u3001JVN\u306eCVSS\u8a55\u4fa1\u304b\u3089\u3001CVE-2026-118869\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u653b\u6483\u3067\u304d\u3001\u4f4e\u3044\u6a29\u9650\u3092\u5fc5\u8981\u3068\u3057\u3001\u5229\u7528\u8005\u306e\u8ffd\u52a0\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u3057\u306a\u3044\u3053\u3068\u3092\u518d\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002<\/p>\n\n<p><strong>\u88dc\u8db3\u5185\u5bb9\uff1a<\/strong>\u672c\u4ef6\u306f\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u3068\u306f\u8a55\u4fa1\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002\u516c\u958b\u30b5\u30a4\u30c8\u306e\u7ba1\u7406\u6a5f\u80fd\u3084\u3001\u4f4e\u6a29\u9650\u30a2\u30ab\u30a6\u30f3\u30c8\u304b\u3089\u5229\u7528\u3067\u304d\u308b\u6a5f\u80fd\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u304c\u91cd\u8981\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/jvn.jp\/jp\/JVN55454512\/index.html\">JVN#55454512<\/a>\u3002 <a href=\"https:\/\/jvn.jp\/jp\/JVN55454512\/index.html\">JVN#55454512: SHIRASAGI\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027<\/a><\/p>\n\n<h3>3-5. \u4e8b\u5b9f\u306e\u8a02\u6b63\u306b\u3064\u3044\u3066<\/h3>\n\n<p>\u4eca\u56de\u306e\u518d\u8abf\u67fb\u3067\u306f\u3001\u63d0\u4f9b\u3055\u308c\u305f\u65e5\u6b21\u8a18\u4e8b\u306e\u4e3b\u8981\u306a\u8106\u5f31\u6027\u8aac\u660e\u306b\u3064\u3044\u3066\u3001\u4e00\u6b21\u60c5\u5831\u3068\u306e\u660e\u78ba\u306a\u98df\u3044\u9055\u3044\u3092\u6839\u62e0\u4ed8\u304d\u3067\u78ba\u5b9a\u3057\u305f\u6848\u4ef6\u306f\u3042\u308a\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n\n<p>\u306a\u304a\u3001\u4e00\u90e8\u65e5\u6b21\u8a18\u4e8b\u306b\u306f\u3001\u5bfe\u8c61\u671f\u9593\u304c\u7d42\u4e86\u3057\u3066\u3044\u306a\u3044\u65e8\u306e\u8a18\u8ff0\u304c\u3042\u308a\u307e\u3059\u3002\u3057\u304b\u3057\u3001\u65e5\u6b21\u8a18\u4e8b\u306e\u6b63\u78ba\u306a\u4f5c\u6210\u65e5\u6642\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u305d\u306e\u8a18\u8ff0\u3060\u3051\u3092\u4e8b\u5b9f\u8aa4\u8a8d\u3068\u306f\u5224\u5b9a\u3057\u307e\u305b\u3093\u3002<\/p>\n\n<h2>4. \u7d9a\u5831\u3068\u7d99\u7d9a\u78ba\u8a8d\u4e8b\u9805<\/h2>\n\n<h3>4-1. Debian Xen\uff1a\u30b2\u30b9\u30c8\u304b\u3089\u30db\u30b9\u30c8\u3078\u306e\u6a29\u9650\u6607\u683c<\/h3>\n\n<p><strong>\u8b58\u5225\u5b50\uff1a<\/strong>DSA-6610-1\u3001CVE-2026-102703\u3001CVE-2026-102704<br>\n<strong>\u516c\u8868\u65e5\u6642\uff1a<\/strong>2026\u5e7411\u67085\u65e504:14:50\uff08\u65e5\u672c\u6642\u9593\uff09<\/p>\n\n<p>Debian\u306fXen\u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u3001\u30b2\u30b9\u30c8\u304b\u3089\u30db\u30b9\u30c8\u3078\u306e\u6a29\u9650\u6607\u683c\u3084\u60c5\u5831\u6f0f\u3048\u3044\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002<\/p>\n\n<p>Debian 13\u5411\u3051\u306e\u4fee\u6b63\u7248\u306f\u3001xen 4.20.4+63-g7abfd2bce2-0+deb13u1\u3067\u3059\u3002<\/p>\n\n<p>\u4eee\u60f3\u5316\u57fa\u76e4\u3092\u904b\u7528\u3059\u308b\u7d44\u7e54\u3067\u306f\u3001\u30b2\u30b9\u30c8\u3068\u30db\u30b9\u30c8\u306e\u5206\u96e2\u306b\u5f71\u97ff\u3059\u308b\u305f\u3081\u91cd\u8981\u3067\u3059\u3002<\/p>\n\n<p>\u63d0\u4f9b\u3055\u308c\u305f11\u67085\u65e5\u4ed8\u65e5\u6b21\u8a18\u4e8b\u306b\u306f\u63b2\u8f09\u3092\u78ba\u8a8d\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00529.html\">Debian DSA-6610-1<\/a>\u3002 <a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00529.html\">[SECURITY] [DSA 6610-1] xen security update<\/a><\/p>\n\n<h3>4-2. Debian Linux\u30ab\u30fc\u30cd\u30eb\uff1a11\u67089\u65e5\u65e9\u671d\u306e\u66f4\u65b0<\/h3>\n\n<p><strong>\u8b58\u5225\u5b50\uff1a<\/strong>DSA-6616-1<br>\n<strong>\u516c\u8868\u65e5\u6642\uff1a<\/strong>2026\u5e7411\u67089\u65e505:26:59\uff08\u65e5\u672c\u6642\u9593\uff09<\/p>\n\n<p>Debian\u306fLinux\u30ab\u30fc\u30cd\u30eb\u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002<\/p>\n\n<p>\u5bfe\u8c61\u306fDebian 13\u3067\u3001\u4fee\u6b63\u7248\u30d1\u30c3\u30b1\u30fc\u30b8\u306f6.12.116-1\u3067\u3059\u3002<\/p>\n\n<p>\u6a29\u9650\u6607\u683c\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3001\u60c5\u5831\u6f0f\u3048\u3044\u306b\u3064\u306a\u304c\u308b\u554f\u984c\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n\n<p>\u3053\u306e\u544a\u77e5\u306f11\u67089\u65e507:00\u3088\u308a\u524d\u306b\u516c\u8868\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u4eca\u56de\u306e\u5bfe\u8c61\u671f\u9593\u306b\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n\n<p><strong>\u65e5\u6b21\u8a18\u4e8b\u3068\u306e\u7167\u5408\uff1a<\/strong>11\u67089\u65e5\u4ed8\u8a18\u4e8b\u306b\u306f\u63b2\u8f09\u3092\u78ba\u8a8d\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002\u516c\u958b\u65e5\u6642\u3068\u91cd\u8981\u6027\u3092\u8e0f\u307e\u3048\u3001\u8ffd\u52a0\u63b2\u8f09\u3092\u691c\u8a0e\u3059\u3079\u304d\u6848\u4ef6\u3067\u3059\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00536.html\">Debian DSA-6616-1<\/a>\u3002 <a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00536.html\">[SECURITY] [DSA 6616-1] linux security update<\/a><\/p>\n\n<h3>4-3. Oracle\uff1a\u65e2\u5b58\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831\u306e\u6539\u8a02<\/h3>\n\n<p>Oracle\u306e\u516c\u5f0f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831\u4e00\u89a7\u3067\u306f\u30012026\u5e7410\u6708\u306eCritical Patch Update\u304c11\u67084\u65e5\u306bRev 3\u3078\u6539\u8a02\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u307e\u305f\u3001CVE-2026-109618\u306b\u95a2\u3059\u308bSecurity Alert\u306b\u3064\u3044\u3066\u300111\u67086\u65e5\u4ed8\u306eRev 3\u304c\u63b2\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u305f\u3060\u3057\u3001\u6539\u8a02\u524d\u5f8c\u306e\u672c\u6587\u3092\u5341\u5206\u306b\u6bd4\u8f03\u3067\u304d\u3066\u3044\u306a\u3044\u305f\u3081\u3001Java SE\u306e\u5f71\u97ff\u7bc4\u56f2\u3084\u4fee\u6b63\u7248\u304c\u5909\u66f4\u3055\u308c\u305f\u304b\u3001\u3042\u308b\u3044\u306fPHP\u95a2\u9023\u306e\u91cd\u8981\u306a\u5bfe\u7b56\u5909\u66f4\u304c\u542b\u307e\u308c\u308b\u304b\u306f\u672a\u78ba\u5b9a\u3067\u3059\u3002<\/p>\n\n<p><strong>\u8a55\u4fa1\uff1a<\/strong>\u8abf\u67fb\u5f85\u3061\u3002\u6539\u8a02\u65e5\u3060\u3051\u3092\u6839\u62e0\u306b\u91cd\u5927\u306a\u7d9a\u5831\u3068\u306f\u6271\u3044\u307e\u305b\u3093\u3002<\/p>\n\n<p>\u78ba\u8a8d\u8cc7\u6599\uff1a<a href=\"https:\/\/www.oracle.com\/security-alerts\/\">Oracle Security Alerts<\/a>\u3001<a href=\"https:\/\/www.oracle.com\/security-alerts\/cpuoct2026.html\">October 2026 CPU<\/a>\u3002<\/p>\n\n<h3>4-4. \u653b\u6483\u30fb\u60c5\u5831\u6d41\u51fa\uff1a\u30d7\u30ec\u30b9\u30c6\u30fc\u30b8\u30fb\u30a4\u30f3\u30bf\u30fc\u30ca\u30b7\u30e7\u30ca\u30eb\u306e\u7b2c2\u5831<\/h3>\n\n<p><strong>\u516c\u8868\u65e5\uff1a<\/strong>2026\u5e7411\u67086\u65e5\uff08\u6642\u523b\u672a\u78ba\u8a8d\uff09<\/p>\n\n<p>\u30d7\u30ec\u30b9\u30c6\u30fc\u30b8\u30fb\u30a4\u30f3\u30bf\u30fc\u30ca\u30b7\u30e7\u30ca\u30eb\u306f\u3001\u30b0\u30eb\u30fc\u30d7\u306e\u696d\u52d9\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3059\u308b\u7b2c2\u5831\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002<\/p>\n\n<p>11\u67082\u65e5\u306e\u767a\u8868\u6642\u70b9\u3067\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u304b\u3063\u305f\u30af\u30ec\u30b8\u30c3\u30c8\u30ab\u30fc\u30c9\u60c5\u5831\u306b\u3064\u3044\u3066\u3001\u8ffd\u52a0\u8abf\u67fb\u306b\u3088\u308a\u3001\u5916\u90e8\u3078\u6301\u3061\u51fa\u3055\u308c\u305f\u60c5\u5831\u306b<strong>\u30ab\u30fc\u30c9\u756a\u53f73\u4ef6\u304c\u542b\u307e\u308c\u3066\u3044\u305f<\/strong>\u3053\u3068\u304c\u5224\u660e\u3057\u307e\u3057\u305f\u3002<\/p>\n\n<p>\u540c\u793e\u306f11\u67086\u65e5\u6642\u70b9\u3067\u3001\u672c\u4ef6\u306b\u8d77\u56e0\u3059\u308b\u4e0d\u6b63\u5229\u7528\u306a\u3069\u306e\u4e8c\u6b21\u88ab\u5bb3\u306f\u78ba\u8a8d\u3057\u3066\u3044\u306a\u3044\u3068\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u3053\u308c\u306f\u65b0\u305f\u306a\u653b\u6483\u306e\u767a\u751f\u3067\u306f\u306a\u304f\u3001\u65e2\u5b58\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u306e\u8abf\u67fb\u306b\u3088\u3063\u3066\u6f0f\u3048\u3044\u60c5\u5831\u306e\u7a2e\u985e\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u7d9a\u5831\u3067\u3059\u3002<\/p>\n\n<p><strong>\u65e5\u6b21\u8a18\u4e8b\u3068\u306e\u7167\u5408\uff1a<\/strong>11\u67087\u65e5\u4ed8\u8a18\u4e8b\u306b\u306f\u63b2\u8f09\u3092\u78ba\u8a8d\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002\u6f0f\u3048\u3044\u60c5\u5831\u306e\u7a2e\u985e\u304c\u5909\u308f\u308b\u91cd\u8981\u306a\u7d9a\u5831\u3067\u3042\u308a\u3001\u8ffd\u8a18\u5019\u88dc\u3068\u3057\u307e\u3059\u3002<\/p>\n\n<p>\u4e00\u6b21\u60c5\u5831\uff1a<a href=\"https:\/\/tdnet-pdf.kabutan.jp\/20261106\/140120261106566814.pdf\">\u30d7\u30ec\u30b9\u30c6\u30fc\u30b8\u30fb\u30a4\u30f3\u30bf\u30fc\u30ca\u30b7\u30e7\u30ca\u30eb\u300c\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306b\u3088\u308b\u500b\u4eba\u60c5\u5831\u6f0f\u3048\u3044\u306b\u95a2\u3059\u308b\u304a\u77e5\u3089\u305b\u3068\u304a\u8a6b\u3073\uff08\u7b2c2\u5831\uff09\u300d<\/a>\u3002 <a href=\"https:\/\/tdnet-pdf.kabutan.jp\/20261106\/140120261106566814.pdf\">\u51fa\u5178<\/a><\/p>\n\n<h3>4-5. WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u7d99\u7d9a\u8abf\u67fb<\/h3>\n\n<p>11\u67084\u65e5\u4ed8\u65e5\u6b21\u8a18\u4e8b\u3067\u306f\u3001BuddyBoss App\u3001Eupago Gateway For WooCommerce\u3001CryptoCloud\u306b\u95a2\u3059\u308bCVE\u5019\u88dc\u3092\u63b2\u8f09\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<p>\u3057\u304b\u3057\u3001\u4eca\u56de\u306e\u9031\u6b21\u518d\u8abf\u67fb\u3067\u3082\u3001\u3053\u308c\u30893\u4ef6\u306b\u3064\u3044\u3066\u958b\u767a\u5143\u306e\u500b\u5225\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3068\u4fee\u6b63\u7248\u3092\u5341\u5206\u306b\u7167\u5408\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n\n<p>\u7279\u306bEupago\u306b\u3064\u3044\u3066\u306f\u3001\u6c7a\u6e08\u5b8c\u4e86\u901a\u77e5\u306e\u691c\u8a3c\u306b\u95a2\u4fc2\u3059\u308b\u554f\u984c\u304c\u5019\u88dc\u3068\u3057\u3066\u6319\u304c\u3063\u3066\u3044\u307e\u3059\u3002\u5b9f\u969b\u306b\u6c7a\u6e08\u78ba\u8a8d\u3092\u507d\u88c5\u3067\u304d\u308b\u306e\u3067\u3042\u308c\u3070EC\u30b5\u30a4\u30c8\u3078\u306e\u696d\u52d9\u4e0a\u306e\u5f71\u97ff\u304c\u5927\u304d\u3044\u305f\u3081\u3001\u512a\u5148\u7684\u306a\u8ffd\u52a0\u8abf\u67fb\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n<p><strong>\u8a55\u4fa1\uff1a<\/strong>3\u4ef6\u3068\u3082\u8abf\u67fb\u5f85\u3061\u3002\u5f71\u97ff\u3068\u4fee\u6b63\u7248\u3092\u78ba\u5b9a\u3067\u304d\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u78ba\u8a8d\u6e08\u307f\u306e\u91cd\u5927\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u6271\u3044\u307e\u305b\u3093\u3002<\/p>\n\n<h2>5. \u53ce\u96c6\u54c1\u8cea\u3068\u8abf\u67fb\u4e0a\u306e\u5236\u7d04<\/h2>\n\n<h3>5-1. \u91cd\u70b9\u60c5\u5831\u6e90\u306e\u78ba\u8a8d\u72b6\u6cc1<\/h3>\n\n<table>\n<thead>\n<tr>\n<th>\u5bfe\u8c61<\/th>\n<th>\u78ba\u8a8d\u72b6\u6cc1<\/th>\n<th>\u6b8b\u308b\u8ab2\u984c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>JVN<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u8a72\u5f53\u60c5\u5831\u3042\u308a<\/td>\n<td>\u4e3b\u8981\u6848\u4ef6\u306e\u500b\u5225\u8cc7\u6599\u3092\u78ba\u8a8d\u3002\u7523\u696d\u5236\u5fa1\u30b7\u30b9\u30c6\u30e0\u95a2\u9023\u306e\u8a73\u7d30\u306f\u4e00\u90e8\u672a\u78ba\u8a8d\u3002<\/td>\n<\/tr>\n<tr>\n<td>JPCERT\/CC<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u8a72\u5f53\u60c5\u5831\u3042\u308a<\/td>\n<td>11\u67085\u65e5\u4ed8Weekly Report\u3092\u78ba\u8a8d\u3002\u63b2\u8f09\u6848\u4ef6\u306e\u5168\u4ef6\u500b\u5225\u691c\u8a3c\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>IPA<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u8a72\u5f53\u60c5\u5831\u3042\u308a<\/td>\n<td>PHP2shell\u95a2\u9023\u8cc7\u6599\u3092\u78ba\u8a8d\u3002\u65e2\u5b58\u544a\u77e5\u306e\u66f4\u65b0\u5dee\u5206\u306f\u4e00\u90e8\u672a\u78ba\u8a8d\u3002<\/td>\n<\/tr>\n<tr>\n<td>CISA KEV<\/td>\n<td>\u53d6\u5f97\u5931\u6557\u30fb\u8abf\u67fb\u5f85\u3061<\/td>\n<td>\u516c\u5f0f\u30c7\u30fc\u30bf\u306e\u5bfe\u8c61\u9031\u5168\u4ef6\u62bd\u51fa\u304c\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>WordPress\u672c\u4f53<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u78ba\u8a8d\u3057\u305f\u7bc4\u56f2\u3067\u8a72\u5f53\u60c5\u5831\u306a\u3057<\/td>\n<td>\u516c\u5f0f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9\u3092\u78ba\u8a8d\u3002<\/td>\n<\/tr>\n<tr>\n<td>WordPress\u30d7\u30e9\u30b0\u30a4\u30f3<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u8a72\u5f53\u60c5\u5831\u3042\u308a<\/td>\n<td>WooCommerce\u95a2\u9023\u3092\u78ba\u8a8d\u3002BuddyBoss\u3001Eupago\u3001CryptoCloud\u306f\u8abf\u67fb\u5f85\u3061\u3002<\/td>\n<\/tr>\n<tr>\n<td>WordPress\u30c6\u30fc\u30de<\/td>\n<td>\u672a\u8abf\u67fb\u7bc4\u56f2\u3042\u308a<\/td>\n<td>\u30c6\u30fc\u30de\u5225\u306e\u91cd\u5927\u8106\u5f31\u6027\u3092\u7db2\u7f85\u7684\u306b\u78ba\u8a8d\u3067\u304d\u305a\u3002<\/td>\n<\/tr>\n<tr>\n<td>PHP<\/td>\n<td>\u4e00\u90e8\u78ba\u8a8d\u6e08\u307f<\/td>\n<td>\u65e2\u5b58\u91cd\u5927\u6848\u4ef6\u3092\u78ba\u8a8d\u3002\u5bfe\u8c61\u9031\u306e\u516c\u5f0f\u5909\u66f4\u5c65\u6b74\u306e\u7167\u5408\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>EC-CUBE 3\/4<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u78ba\u8a8d\u3057\u305f\u7bc4\u56f2\u3067\u8a72\u5f53\u60c5\u5831\u306a\u3057<\/td>\n<td>\u516c\u5f0f\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u3092\u78ba\u8a8d\u3002\u30d7\u30e9\u30b0\u30a4\u30f3\u5168\u4ef6\u306f\u672a\u78ba\u8a8d\u3002<\/td>\n<\/tr>\n<tr>\n<td>Debian<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u8a72\u5f53\u60c5\u5831\u3042\u308a<\/td>\n<td>APT\u3001Xen\u3001Linux\u30ab\u30fc\u30cd\u30eb\u306a\u3069\u3092\u78ba\u8a8d\u3002<\/td>\n<\/tr>\n<tr>\n<td>Ubuntu<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u8a72\u5f53\u60c5\u5831\u3042\u308a<\/td>\n<td>APT\u306e\u500b\u5225\u544a\u77e5\u3092\u78ba\u8a8d\u3002\u5168USN\u306e\u8a73\u7d30\u78ba\u8a8d\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>Red Hat<\/td>\n<td>\u5019\u88dc\u3042\u308a\uff1a\u8a73\u7d30\u8abf\u67fb\u672a\u5b8c\u4e86<\/td>\n<td>\u5bfe\u8c61\u9031\u306eRHSA\u3068\u4fee\u6b63\u7248\u306e\u7167\u5408\u304c\u4e0d\u8db3\u3002<\/td>\n<\/tr>\n<tr>\n<td>Rocky Linux<\/td>\n<td>\u53d6\u5f97\u5931\u6557<\/td>\n<td>\u516c\u5f0fErrata\u4e00\u89a7\u306e\u672c\u6587\u53d6\u5f97\u304c\u3067\u304d\u305a\u3002<\/td>\n<\/tr>\n<tr>\n<td>Amazon Linux<\/td>\n<td>\u4e00\u90e8\u78ba\u8a8d\u6e08\u307f<\/td>\n<td>Amazon Linux 2023\u3092\u4e2d\u5fc3\u306b\u78ba\u8a8d\u3002\u4ed6\u7cfb\u5217\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>AWS<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u8a72\u5f53\u60c5\u5831\u3042\u308a<\/td>\n<td>\u8907\u6570\u306e\u500b\u5225\u544a\u77e5\u3092\u78ba\u8a8d\u3002\u5168\u66f4\u65b0\u5c65\u6b74\u306e\u5dee\u5206\u7167\u5408\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>Java JDK\/JRE<\/td>\n<td>\u4e00\u90e8\u78ba\u8a8d\u6e08\u307f<\/td>\n<td>Oracle\u306e\u6539\u8a02\u3092\u78ba\u8a8d\u3002\u305d\u306e\u4ed6\u306eJDK\u914d\u5e03\u5143\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>Spring Framework \/ Boot \/ Security<\/td>\n<td>\u78ba\u8a8d\u6e08\u307f\uff1a\u78ba\u8a8d\u3057\u305f\u4e00\u89a7\u3067\u8a72\u5f53\u60c5\u5831\u306a\u3057<\/td>\n<td>\u65e2\u5b58\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306e\u500b\u5225\u66f4\u65b0\u5c65\u6b74\u306f\u672a\u78ba\u8a8d\u3002<\/td>\n<\/tr>\n<tr>\n<td>Log4j 1.x \/ 2.x<\/td>\n<td>\u4e00\u90e8\u78ba\u8a8d\u6e08\u307f<\/td>\n<td>\u65e2\u5b58\u6848\u4ef6\u306e\u66f4\u65b0\u5c65\u6b74\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>Apache Tomcat<\/td>\n<td>\u4e00\u90e8\u78ba\u8a8d\u6e08\u307f<\/td>\n<td>\u4e3b\u8981\u7cfb\u5217\u306e\u516c\u5f0f\u60c5\u5831\u3092\u78ba\u8a8d\u3002\u500b\u5225\u5909\u66f4\u5c65\u6b74\u306f\u672a\u5b8c\u4e86\u3002<\/td>\n<\/tr>\n<tr>\n<td>Struts \/ Hibernate \/ Jackson<\/td>\n<td>\u4e00\u90e8\u78ba\u8a8d\u6e08\u307f<\/td>\n<td>\u516c\u5f0f\u4e00\u89a7\u30fbGHSA\u3092\u4e00\u90e8\u78ba\u8a8d\u3002\u95a2\u9023\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u5168\u4f53\u306f\u672a\u8abf\u67fb\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n<p>\u78ba\u8a8d\u3067\u304d\u305f\u516c\u5f0f\u4e00\u89a7\u306e\u4f8b\u3068\u3057\u3066\u3001<a href=\"https:\/\/jvn.jp\/\">JVN<\/a>\u3001<a href=\"https:\/\/www.debian.org\/security\/\">Debian Security<\/a>\u3001<a href=\"https:\/\/ubuntu.com\/security\/notices\">Ubuntu Security Notices<\/a>\u3001<a href=\"https:\/\/spring.io\/security\/\">Spring Security Advisories<\/a>\u3001<a href=\"https:\/\/www.ec-cube.net\/info\/weakness\/index.php\">EC-CUBE\u516c\u5f0f\u8106\u5f31\u6027\u30ea\u30b9\u30c8<\/a>\u304c\u3042\u308a\u307e\u3059\u3002 <a href=\"https:\/\/jvn.jp\/\">Japan Vulnerability Notes<\/a><\/p>\n\n<h3>5-2. \u65e5\u6b21\u8a18\u4e8b\u3068\u306e\u7167\u5408\u3067\u78ba\u8a8d\u3067\u304d\u305f\u8ab2\u984c<\/h3>\n\n<p>\u4eca\u56de\u306e\u691c\u8a3c\u3067\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u4e3b\u306a\u8ab2\u984c\u306f\u3001<strong>\u91cd\u70b9\u5bfe\u8c61\u306e\u88fd\u54c1\u5225\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3092\u3001\u516c\u5f0f\u30cb\u30e5\u30fc\u30b9\u4e00\u89a7\u3060\u3051\u3067\u306f\u5341\u5206\u306b\u6355\u6349\u3067\u304d\u306a\u3044\u3053\u3068<\/strong>\u3067\u3059\u3002<\/p>\n\n<p>WordPress\u672c\u4f53\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9\u306b\u65b0\u7740\u304c\u306a\u304f\u3066\u3082\u3001WooCommerce\u3084WooPayments\u306e\u3088\u3046\u306a\u30d7\u30e9\u30b0\u30a4\u30f3\u958b\u767a\u5143\u304b\u3089\u91cd\u8981\u306a\u4fee\u6b63\u304c\u516c\u958b\u3055\u308c\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n<p>\u307e\u305f\u3001AWS\u3067\u306f\u540c\u3058\u9031\u306b\u8907\u6570\u306e\u91cd\u8981\u306a\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u304c\u516c\u958b\u3055\u308c\u3066\u304a\u308a\u3001EKS\u3001Firecracker\u3001Babelfish\u3001Systems Manager\u306a\u3069\u3001\u30b5\u30fc\u30d3\u30b9\u3054\u3068\u306e\u500b\u5225\u78ba\u8a8d\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n<p>Linux\u306b\u3064\u3044\u3066\u3082\u3001\u30af\u30e9\u30a6\u30c9\u4e8b\u696d\u8005\u306e\u544a\u77e5\u3060\u3051\u3067\u306a\u304f\u3001Debian\u3084Ubuntu\u306e\u516c\u5f0f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3092\u76f4\u63a5\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3001\u4fee\u6b63\u7248\u3068\u516c\u8868\u65e5\u6642\u3092\u3088\u308a\u6b63\u78ba\u306b\u628a\u63e1\u3067\u304d\u307e\u3059\u3002<\/p>\n\n<p>\u4e00\u65b9\u3001\u4fdd\u5b58\u3055\u308c\u305f\u65e5\u6b21\u8a18\u4e8b\u306b\u306f\u3001Airbyte\u306e\u60aa\u7528\u72b6\u6cc1\u3001APT\u306e\u653b\u6483\u6761\u4ef6\u3001AWS Babelfish\u306e\u4fee\u6b63\u7248\u306a\u3069\u3001\u91cd\u8981\u306a\u8aac\u660e\u304c\u65e2\u306b\u542b\u307e\u308c\u3066\u3044\u307e\u3057\u305f\u3002\u3053\u308c\u3089\u3092\u672a\u63b2\u8f09\u3084\u65b0\u305f\u306a\u5206\u6790\u4e0d\u8db3\u3068\u3057\u3066\u91cd\u8907\u8a55\u4fa1\u3059\u308b\u3053\u3068\u306f\u9069\u5207\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n<h3>5-3. \u672a\u89e3\u6c7a\u4e8b\u9805<\/h3>\n\n<p>\u4eca\u5f8c\u306e\u8ffd\u52a0\u8abf\u67fb\u304c\u7279\u306b\u5fc5\u8981\u306a\u306e\u306f\u3001CISA KEV\u306e\u5bfe\u8c61\u9031\u8ffd\u52a0\u60c5\u5831\u3001Rocky Linux\u3068Red Hat\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3001WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u500b\u5225\u5019\u88dc\u3001Oracle\u306e\u6539\u8a02\u5dee\u5206\u3067\u3059\u3002<\/p>\n\n<p>\u3053\u308c\u3089\u306b\u3064\u3044\u3066\u306f\u3001\u672a\u78ba\u8a8d\u3067\u3042\u308b\u3053\u3068\u3092\u7406\u7531\u306b\u300c\u8106\u5f31\u6027\u306a\u3057\u300d\u300c\u66f4\u65b0\u306a\u3057\u300d\u3068\u306f\u5224\u65ad\u3057\u3066\u3044\u307e\u305b\u3093\u3002<\/p>\n\n<p>\u307e\u305f\u3001\u63d0\u4f9b\u3055\u308c\u305f\u5206\u91ce\u5225\u8abf\u67fb\u8a18\u9332\u306b\u3064\u3044\u3066\u3082\u3001\u5168\u9805\u76ee\u3092\u72ec\u7acb\u306b\u691c\u8a3c\u3067\u304d\u305f\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u4eca\u56de\u306e\u9031\u6b21\u8a18\u4e8b\u3067\u306f\u3001\u91cd\u8981\u6027\u3092\u8a55\u4fa1\u3067\u304d\u305f\u6848\u4ef6\u306b\u3064\u3044\u3066\u500b\u5225\u8cc7\u6599\u3092\u518d\u78ba\u8a8d\u3057\u3001\u78ba\u5b9a\u3067\u304d\u306a\u3044\u5019\u88dc\u3092\u533a\u5225\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<h2>6. \u65e5\u6b21\u8a18\u4e8b\u3078\u306e\u8ffd\u8a18\u6848<\/h2>\n\n<p>\u4ee5\u4e0b\u306f\u3001\u63d0\u4f9b\u3055\u308c\u305f\u65e5\u6b21\u672c\u6587\u3078\u306e\u8ffd\u8a18\u6848\u3067\u3059\u3002\u5b9f\u969b\u306e\u65e5\u6b21\u8a18\u4e8b\u306e\u66f4\u65b0\u306f\u5b9f\u65bd\u3057\u3066\u3044\u307e\u305b\u3093\u3002<\/p>\n\n<h3>11\u67084\u65e5\u4ed8\u3078\u306e\u8ffd\u8a18\u5019\u88dc<\/h3>\n\n<p>2026\u5e7411\u67083\u65e5\u3001WooPayments\u306e\u30b5\u30d6\u30b9\u30af\u30ea\u30d7\u30b7\u30e7\u30f3\u6a5f\u80fd\u306b\u3064\u3044\u3066\u8ffd\u52a0\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002\u8907\u6570\u306e\u65e7\u30d0\u30fc\u30b8\u30e7\u30f3\u7cfb\u5217\u306b\u4fee\u6b63\u7248\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u5c0e\u5165\u30b5\u30a4\u30c8\u3067\u306f\u66f4\u65b0\u72b6\u6cc1\u3092\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u306a\u304a\u3001\u516c\u8868\u6642\u523b\u3068\u30bf\u30a4\u30e0\u30be\u30fc\u30f3\u306f\u672a\u78ba\u8a8d\u3067\u3059\u3002<\/p>\n\n<h3>11\u67085\u65e5\u4ed8\u3078\u306e\u8ffd\u8a18\u5019\u88dc<\/h3>\n\n<p>WooCommerce 11.2.2\u3067\u306f\u3001API\u8a8d\u8a3c\u3001\u6ce8\u6587\u30fb\u6c7a\u6e08\u51e6\u7406\u3001\u7ba1\u7406\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306a\u3069\u306b\u95a2\u4fc2\u3059\u308b\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u307e\u305f\u3001AWS\u306fAmazon EKS Network Policy Agent\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u56de\u907f\u3001\u304a\u3088\u3073Firecracker\u306e\u30b2\u30b9\u30c8\u304b\u3089\u30db\u30b9\u30c8\u30d7\u30ed\u30bb\u30b9\u30e1\u30e2\u30ea\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u8a72\u5f53\u6a5f\u80fd\u3092\u4f7f\u7528\u3059\u308b\u74b0\u5883\u3067\u306f\u3001\u516c\u5f0f\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306b\u57fa\u3065\u304f\u4fee\u6b63\u7248\u306e\u9069\u7528\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n<h3>11\u67087\u65e5\u4ed8\u3078\u306e\u8ffd\u8a18\u5019\u88dc<\/h3>\n\n<p>\u30d7\u30ec\u30b9\u30c6\u30fc\u30b8\u30fb\u30a4\u30f3\u30bf\u30fc\u30ca\u30b7\u30e7\u30ca\u30eb\u306f11\u67086\u65e5\u3001\u65e2\u5b58\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u4e8b\u6848\u306b\u95a2\u3059\u308b\u7b2c2\u5831\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u8ffd\u52a0\u8abf\u67fb\u306b\u3088\u308a\u3001\u5916\u90e8\u3078\u6301\u3061\u51fa\u3055\u308c\u305f\u60c5\u5831\u306b\u30af\u30ec\u30b8\u30c3\u30c8\u30ab\u30fc\u30c9\u756a\u53f73\u4ef6\u304c\u542b\u307e\u308c\u3066\u3044\u305f\u3053\u3068\u304c\u5224\u660e\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n<h3>11\u67089\u65e5\u4ed8\u3078\u306e\u8ffd\u8a18\u5019\u88dc<\/h3>\n\n<p>Debian\u306f2026\u5e7411\u67089\u65e505:26:59\uff08\u65e5\u672c\u6642\u9593\uff09\u3001Linux\u30ab\u30fc\u30cd\u30eb\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0DSA-6616-1\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002Debian 13\u5411\u3051\u306e\u4fee\u6b63\u7248\u306f6.12.116-1\u3067\u3059\u3002\u5bfe\u8c61\u74b0\u5883\u3067\u306f\u4fee\u6b63\u6e08\u307f\u30ab\u30fc\u30cd\u30eb\u3078\u306e\u66f4\u65b0\u3068\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u305f\u518d\u8d77\u52d5\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\n<h2>\u53c2\u7167\u60c5\u5831<\/h2><ul><li><a href=\"https:\/\/jvn.jp\/\">Japan Vulnerability Notes<\/a><\/li><li><a href=\"https:\/\/tdnet-pdf.kabutan.jp\/20261106\/140120261106566814.pdf\">https:\/\/tdnet-pdf.kabutan.jp\/20261106\/140120261106566814.pdf<\/a><\/li><li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00536.html\">[SECURITY] [DSA 6616-1] linux security update<\/a><\/li><li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00529.html\">[SECURITY] [DSA 6610-1] xen security update<\/a><\/li><li><a href=\"https:\/\/jvn.jp\/jp\/JVN55454512\/index.html\">JVN#55454512: SHIRASAGI\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027<\/a><\/li><li><a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-169-aws\/\">CVE-2026-122192: Guest Access to Firecracker Process Memory After a Failed Memory Discard<\/a><\/li><li><a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/2026-170-aws\/\">CVE-2026-122266 &#8211; Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS<\/a><\/li><li><a href=\"https:\/\/developer.woocommerce.com\/2026\/11\/03\/security-update-for-woopayments\/\">Security update for WooPayments Advisories \u2013 The WooCommerce Developer Blog<\/a><\/li><li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2026\/msg00526.html\">[SECURITY] [DSA 6607-1] apt security update<\/a><\/li><li><a href=\"https:\/\/jvn.jp\/jp\/JVN12040144\/index.html\">JVN#12040144: Airbyte\u306b\u304a\u3051\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u53ef\u80fd\u306a\u8106\u5f31\u6027<\/a><\/li><\/ul>","protected":false},"excerpt":{"rendered":"\u5bfe\u8c61\u671f\u9593\uff1a2026\u5e7411\u670802\u65e5 07:00\uff5e2026\u5e7411\u670809\u65e5 07:00\uff08\u65e5\u672c\u6642\u9593\uff09\u672c\u8a18\u4e8b\u306f\u516c\u958b\u60c5\u5831\u3092\u57fa\u306bAI\u3067\u81ea\u52d5\u4f5c\u6210\u3057\u3066\u3044\u307e\u3059\u3002\u5bfe\u5fdc\u524d\u306b\u5404\u9805\u76ee\u306e\u4e00\u6b21\u60c5\u5831\u3092\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002\u751f\u6210\u30ea\u30af\u30a8\u30b9\u30c8\u958b\u59cb\uff1a2026-11-0 [&hellip;]","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,13],"tags":[],"class_list":["post-1809","post","type-post","status-publish","format-standard","hentry","category-security","category-security-weekly"],"_links":{"self":[{"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/posts\/1809","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/comments?post=1809"}],"version-history":[{"count":1,"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/posts\/1809\/revisions"}],"predecessor-version":[{"id":1810,"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/posts\/1809\/revisions\/1810"}],"wp:attachment":[{"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/media?parent=1809"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/categories?post=1809"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.javable.jp\/blog\/wp-json\/wp\/v2\/tags?post=1809"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}