UCSF IT Technology

VMware has released security updates to address vulnerabilities in VMware Workspace ONE Assist. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Microsoft released their November Security Update to address vulnerabilities in multiple Microsoft products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to November 2022 Security Updates. IT Security

Cisco has released security updates to address High and Medium vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Cisco Security Advisories page. IT Security

Apple has released a security update to address vulnerabilities in Apple Xcode. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

Mandiant reported a vulnerability in F5 njs. Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c.

Red Hat released multiple security updates in October for various Red Hat products. For a complete description of the vulnerabilities and affected systems go to Red Hat October 2022 Archives by date. IT Security Read more about IT Security service offerings.

Ubuntu released multiple security updates in October for various Ubuntu products.

Suse released multiple security updates in October for various Suse products. 

Microsoft released a security update to address a vulnerability in Jupyter Notebooks for Azure Cosmos DB. An attacker could exploit this vulnerability to gain read/write access to the notebooks in the victim’s workspace.

The OpenSSL Security Team has released security updates to address High vulnerabilities in OpenSSL. An attacker could exploit these vulnerabilities to cause a denial of service or remote code execution. For a complete description of the vulnerabilities and affected systems go to OpenSSL Security Advisory [01 November 2022]. IT Security