Blog

Expat vulnerabilities CVE-2021-45960, CVE-2022-22825, CVE-2022-22826, and CVE-2022-22827 Security Advisory Security Advisory Description CVE-2021-45960 In Expat (aka libexpat) before 2.4.3, a left ... More info: https://support.f5.com/csp/article/K91589041?utm_source=f5support&utm_medium=RSS

Expat vulnerabilities CVE-2022-22822, CVE-2022-22823, and CVE-2022-22824 Security Advisory Security Advisory Description CVE-2022-22822 addBinding in xmlparse.c in Expat (aka libexpat) before 2.4. ... More info: https://support.f5.com/csp/article/K23421535?utm_source=f5support&utm_medium=RSS

rsync vulnerability CVE-2020-14387 Security Advisory Security Advisory Description A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch ... More info: https://support.f5.com/csp/article/K84155336?utm_source=f5support&utm_medium=RSS

Multiple Expat vulnerabilities CVE-2022-23852, CVE-2022-25235, CVE-2022-25236, and CVE-2022-23515 Security Advisory Security Advisory Description CVE-2022-23852 Expat (aka libexpat) before 2.4.4 ... More info: https://support.f5.com/csp/article/K19473898?utm_source=f5support&utm_medium=RSS

GNU C Library (glibc) vulnerabilities CVE-2022-23218 and CVE-2022-23219 Security Advisory Security Advisory Description CVE-2022-23218 The deprecated compatibility function svcunix_create in the ... More info: https://support.f5.com/csp/article/K52308021?utm_source=f5support&utm_medium=RSS

GNU C Library (glibc) vulnerability CVE-2021-3999 Security Advisory Security Advisory Description ** RESERVED ** This candidate has been reserved by an organization or individual that will use it ... More info: https://support.f5.com/csp/article/K24207649?utm_source=f5support&utm_medium=RSS

PostgreSQL JDBC vulnerability CVE-2022-21724 Security Advisory Security Advisory Description pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for ... More info: https://support.f5.com/csp/article/K69124112?utm_source=f5support&utm_medium=RSS

PosGreSQL JDBC vulnerability CVE-2021-21724 Security Advisory Security Advisory Description A ZTE product has a memory leak vulnerability. Due to the products improper handling of memory release ... More info: https://support.f5.com/csp/article/K69124112?utm_source=f5support&utm_medium=RSS

If you have not deployed the Workspace ONE Console patches or workarounds of December 2021 documented in VMSA-2021-0029, now is the time to do so. These workarounds and patches prevent exploitation of CVE-2021-22054. Details of this issue have now become available, which makes exploitation in the wild more likely. We have closely worked with the … ContinuedThe post Workspace ONE UEM SSRF CVE-2021-22054 Patch Alert appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2022/04/workspace-one-uem-ssrf-cve-2021-22054-patch-alert.html?utm_source=rss&utm_medium=rss&utm_campaign=workspace-one-uem-ssrf-cve-2021-22054-patch-alert

If you have not deployed the Workspace ONE Console patches or workarounds of December 2021 documented in VMSA-2021-0029, now is the time to do so. These workarounds and patches prevent exploitation of CVE-2021-22054. Details of this issue have now become available, which makes exploitation in the wild more likely. We have closely worked with the … ContinuedThe post Workspace ONE UEM SSRF CVE-2021-22054 patch alert appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2022/04/workspace-one-uem-ssrf-cve-2021-22054-patch-alert.html?utm_source=rss&utm_medium=rss&utm_campaign=workspace-one-uem-ssrf-cve-2021-22054-patch-alert