UCSF IT Technology

Request a 21 CFR Part 11 DocuSign account (separate from main UCSF DocuSign account)Instructions on how to sign a 21 CFR Part 11 DocuSign envelope

Apache released a security update to address a vulnerability in Apache Ofbiz.For a complete description of the vulnerabilities and affected systems go to [CVE-2024-45195] Add permission check for view-maps and change defaults for request-maps. IT Security Read more about IT Security service offerings.

Veeam has released security updates to address Critical and other vulnerabilities in multiple Veeam Products.For a complete description of the vulnerabilities and affected systems go to Veeam Security Bulletin (September 2024). IT Security Read more about IT Security service offerings.

Threat

VMware has released security updates to address a High vulnerability affecting multiple VMware Fusion. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application. For a complete description of the vulnerabilities and affected systems go to

Android released its August Android update to address a High Actively Exploited and other vulnerabilities in Android Devices. The most severe of these issues is a high security vulnerability in the Framework component that could lead to local escalation of privilege with no additional execution privileges needed. 

Cisco has released security updates to address Critical and other vulnerabilities in multiple Cisco Products.For a complete description of the vulnerabilities and affected systems go to Cisco Security Advisories.IT Security Read more about IT Security service offerings.

Google has released new versions of Chrome to address vulnerabilities in Google Chrome.For a complete description of the vulnerabilities and affected systems go to Chrome Releases. IT Security Read more about IT Security service offerings.

SonicWall has released security updates to address a Critical vulnerability in SonicWall Firewalls. An attacker could exploit this vulnerability to gain unauthorized access and in certain conditions, cause the company’s firewalls to crash.