UCSF IT Technology

Apache released security updates to address a Critical vulnerability in Apache Roller open-source, Java-based blogging server software. An attacker could exploit the vulnerability to retain unauthorized access even after a password change. For a complete description of the vulnerabilities and affected systems, go to CVE-2025-24859: Apache Roller: Insufficient Session Expiration on Password Change.

Chrome released security updates to address vulnerabilities in Chrome.For a complete description of the vulnerabilities and affected systems, go to Chrome Releases.IT Security Read more about IT Security service offerings.

SonicWall has released security updates to address vulnerabilities in NetExtender for Windows. For a complete description of the vulnerabilities and affected systems, go to SonicWall NetExtender Windows Client Multiple Vulnerabilities 7.2.IT Security Read more about IT Security service offerings.

VMware has released security updates to address vulnerabilities in VMware Products.For a complete description of the vulnerabilities and affected systems, go to Security Advisories - Tanzu.IT Security Read more about IT Security service offerings.

Zoom released security updates to address vulnerabilities in Zoom. For a complete description of the vulnerabilities and affected systems, go to Zoom Security Bulletins.IT Security Read more about IT Security service offerings.