UCSF IT Technology

The Apache Software Foundation has released an Important security advisory to address a zero-day vulnerability that is being actively exploited in the Apache HTTP Server. This advisory protects against an attacker using the path traversal attack to map URLs to files outside the expected document root.

Google has released Chrome version 94.0.4606.71 to address vulnerabilities for Windows, Mac, and Linux. These updates protect against remote attackers using the vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit Stable Channel Update for Desktop.

Canonical published new Linux kernel security updates for Ubuntu. These updates protect against remote attackers using the vulnerabilities to cause a denial of service, expose sensitive information, and/or execute arbitrary code. For a complete description of the vulnerabilities and effected systems, visit USN-5092-2: Linux kernel vulnerabilities.