UCSF IT Technology

Google has released Chrome version 98.0.4758.102 for Windows, Mac, and Linux. A remote attacker could exploit this vulnerability to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit Chrome Release Note. IT Security

Google has released Chrome versions 98.0.4758.80/81/82 for Windows and 98.0.4758.80 for Mac and Linux to address multiple Low, Medium, High, and Critical vulnerabilities for Windows, Mac, and Linux. A remote attacker could exploit this vulnerability to take control of an affected system.

Let’s Encrypt active certificates were mis-issued. Revocation of the affected certificates and will begin at 16:00 UTC on 28 January 2022.  For a complete description of the vulnerabilities and effected systems, visit 2022.01.25 Issue with TLS-ALPN-01 Validation Method.

Cisco has released security updates to address a Critical-risk vulnerability that was detected within Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software. A remote attacker could exploit these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit Cisco Security Advisory. 

SolarWinds has released Serv-U 15.3 to patch for a vulnerability that Microsoft says has been abused for the propagation of Log4j attacks. Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. For a complete description of the vulnerabilities and effected systems, visit SolarWinds security advisories.

Microsoft releases Out-of-band update to address critical issues after installing the January Windows update. This update addresses issues related to VPN connectivity, Windows Server Domain Controllers restarting, Virtual Machines start failures, and ReFS-formatted removable media failing to mount. For a complete description of the vulnerabilities and effected systems, visit Windows message center. 

Microsoft has pulled the January Windows Server cumulative updates after numerous critical bugs were detected. These issues included domain controllers going through an endless reboot loop, ReFS volumes becoming inaccessible and showing as RAW file systems, and Hyper-V no longer starting on servers.