UCSF IT Technology

Google released its March Android update to address Critical, 0-Day, and other vulnerabilities in Android devices. The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution with no additional execution privileges needed. For a complete description of the vulnerabilities and affected systems, go to: Android Security Bulletin March 2025.IT Security 

VMware has released security updates to address Critical, 0-day, and other vulnerabilities affecting VMware products.For a complete description of the vulnerabilities and affected systems, go to VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226).IT Security 

Cisco has released security updates to address vulnerabilities in multiple Cisco products.  A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems, go to Cisco Security Advisories.IT Security Read more about IT Security service offerings.

Ubuntu released multiple security updates in February for various Ubuntu products.For a complete description of the vulnerabilities and affected systems, go to Ubuntu February 2025 Archives by date.IT Security Read more about IT Security service offerings.

Suse released multiple security updates in February for various Suse products.For a complete description of the vulnerabilities and affected systems, go to Suse Feb 2025 Archives by date.IT Security Read more about IT Security service offerings.

Red Hat released multiple security updates in February for various Red Hat productsFor a complete description of the vulnerabilities and affected systems, go to Red Hat Security Advisories.IT Security Read more about IT Security service offerings.

Atlassian this week announced the rollout of patches for 12 Critical- and High-severity vulnerabilities in its Bamboo, Bitbucket, Confluence, Crowd, and Jira products. If successfully exploited, the vulnerabilities could result in remote code execution (RCE) by unauthenticated attackers and a high-severity denial-of-service (DoS) attack.For a complete description of the vulnerabilities and affected systems, go to Atlassian Security Bulletin – February 2025.

Citrix addressed a high-severity privilege escalation vulnerability impacting NetScaler Console and NetScaler Agent under certain conditions. The vulnerability is an improper privilege management that could allow attackers to escalate privileges under certain conditions.For a complete description of the vulnerabilities and affected systems, go to Citrix Security Bulletin.

Google has released new versions of Chrome to address vulnerabilities in Google Chrome.For a complete description of the vulnerabilities and affected systems, go to Chrome Releases.IT Security Read more about IT Security service offerings.