UCSF IT Technology

Two security vulnerabilities have been discovered in the OpenSSH secure networking utility suite. If successfully exploited, could result in an active machine-in-the-middle (MitM) and a denial-of-service (DoS) attack, respectively, under certain conditions.For a complete description of the vulnerabilities and affected systems, go to OpenSSH Release Notes.IT Security Read more about IT Security service offerings.

Juniper Networks last week published an out-of-cycle security bulletin to inform customers about the availability of patches for a critical authentication bypass vulnerability affecting its Session Smart Router product. The vulnerability may allow a network-based attacker to bypass authentication and take administrative control of the device.

PostgreSQL received a security update to address a vulnerability. An attacker could exploit this vulnerability to perform arbitrary code execution.For a complete description of the vulnerabilities and affected systems, go to CVE-2025-1094 - PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation.IT SecurityRead more about IT Security service offerings.