Security Notices
Adobe Substance 3D Modeler Update Addresses 4 Vulnerabilities

Substance 3D Modeler 1.22.8 fixes four memory-safety flaws that can permit code execution with user interaction. Deploy the stated fixed release and verify the application version before resuming untrusted-asset workflows.

Read this guide
Security Notices
Adobe AEM Forms on JEE Update Addresses 6 Vulnerabilities

AEM Forms on JEE needs its branch-specific service pack or hotfix for six Critical flaws. A 6.5.25 base installation remains affected without the required hotfix; verify every applicable node.

Read this guide
Security Notices
Adobe Connect Update Addresses 9 Vulnerabilities

Adobe Connect and its Android app require separate updates for flaws including code execution, file reads and privilege escalation. Inventory both the deployment and client fleet; authentication and interaction requirements differ across the nine issues.

Read this guide
Security Notices
Adobe Bridge Update Addresses 7 Vulnerabilities

Adobe Bridge 15.1.8 LTS and 16.0.7 fix six code-execution flaws and one memory-exposure flaw requiring user interaction. Update the installed branch; Adobe reports no known exploitation in the wild.

Read this guide
Security Notices
Adobe Content Credentials SDK Update Addresses 7 Vulnerabilities

Adobe Content Credentials updates address security-feature bypass and denial of service in the Rust SDK and C2PA Tool. Update embedded c2pa dependencies and standalone c2patool separately, rebuilding and redeploying consuming applications where required.

Read this guide
Security Notices
Ubiquiti UniFi Gateway Updates Fix Six Denial-of-Service Flaws

Six UniFi gateway flaws can cause network-triggered denial of service. Match firmware to the exact device model, distinguish Express from Express 7, and prepare configuration backups and recovery access before updating.

Read this guide
Security Notices
Adobe InDesign Update Addresses 2 Vulnerabilities

Adobe InDesign updates fix two user-interaction-dependent flaws that can crash the application on Windows and macOS. Install 21.6 or 20.5.5 for the appropriate branch; the bulletin does not describe code execution.

Read this guide
Security Notices
Red Hat Web Terminal Operator Updates Address Five Flaws

Red Hat Web Terminal updates address five Go-library denial-of-service flaws across four release streams. Verify the web-terminal-exec image used by workloads, not just the Operator version, and coordinate replacement of existing sessions.

Read this guide
Security Notices
RTI Connext Updates Address Nineteen Vulnerabilities

RTI Connext Professional and AUTOSAR Toolkit updates cover nineteen vulnerabilities with different component, architecture and configuration requirements. Match each deployed branch to its supported patch and plan rebuild, redeployment and interoperability checks.

Read this guide
Security Notices
Red Hat GStreamer Good Update Fixes Three RHEL 7 Flaws

RHEL 7 Extended Lifecycle Support updates GStreamer Good Plugins for untrusted RTP streams and crafted AVI files. Use Red Hat's backported package and restart affected applications as needed to load the updated library.

Read this guide