UCSF IT Technology

Cisco has released a security advisory to address Critical vulnerabilities in the Cisco Nexus Dashboard.  These vulnerabilities could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.

Google has released Chrome version 103.0.5060.134 for Windows, Mac, and Linux. A remote attacker could exploit these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems Chrome Release Note. IT Security

Drupal has released security updates to address Moderately Critical vulnerabilities in Drupal core. A remote attacker could exploit these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2022-015. IT Security Read more about IT Security service offerings.

Oracle released their July Critical Patch Update to address vulnerabilities in Oracle products.  For a complete description of the vulnerabilities and affected systems Oracle Critical Patch Update Advisory - July 2022 IT Security Read more about IT Security service offerings.

WordPress released WordPress 6.0.1 to address vulnerabilities in WordPress. An attacker could exploit some of these vulnerabilities to take control of an affected website. For a complete description of the vulnerabilities and affected systems WordPress 6.0.1 is now available. IT Security Read more about IT Security service offerings.

Juniper Networks has released security updates to address vulnerabilities affecting multiple Juniper products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Lenovo has released security updates to address vulnerabilities in Lenovo UEFI Firmware impacting multiple laptop models.  For a complete description of the vulnerabilities and affected systems Lenovo Notebook BIOS Vulnerabilities. IT Security Read more about IT Security service offerings.

AWS has released a security advisory to address a vulnerability impacting multiple AWS products. An attacker could exploit some of this vulnerability to escalate privileges.  For a complete description of the vulnerabilities and affected systems Reported EKS IAM Authenticator Issue. IT Security Read more about IT Security service offerings.