UCSF IT Technology

A security update was released to address a Critical vulnerability in Veeam Backup & Replication. An attacker could exploit this vulnerability to perform remote code execution (RCE).For a complete description of the vulnerabilities and affected systems, go to KB 4724 CVE-2025-23120.IT Security Read more about IT Security service offerings.

A security update was released to address a vulnerability in Github Action, tj-actions/changed-files. An attacker could exploit this vulnerability to disclosure of Github Personal Access Tokens (PATs), npm tokens, and private RSA keys.For a complete description of the vulnerabilities and affected systems, go toIT Security Read more about IT Security service offerings.

A new version of the OpenSAML library package has been released to address vulnerabilities. If exploited, this vulnerability could enable full account takeovers across organizations relying on SAML-based single sign-on (SSO).For a complete description of the vulnerabilities and affected systems, go to Shibboleth Service Provider Security Advisory.IT Security