Security Notices
Adobe Content Credentials SDK Update Addresses 7 Vulnerabilities
Adobe Content Credentials updates address security-feature bypass and denial of service in the Rust SDK and C2PA Tool. Update embedded c2pa dependencies and standalone c2patool separately, rebuilding and redeploying consuming applications where required.
Ubiquiti UniFi Gateway Updates Fix Six Denial-of-Service Flaws
Six UniFi gateway flaws can cause network-triggered denial of service. Match firmware to the exact device model, distinguish Express from Express 7, and prepare configuration backups and recovery access before updating.
Adobe InDesign Update Addresses 2 Vulnerabilities
Adobe InDesign updates fix two user-interaction-dependent flaws that can crash the application on Windows and macOS. Install 21.6 or 20.5.5 for the appropriate branch; the bulletin does not describe code execution.
RTI Connext Updates Address Nineteen Vulnerabilities
RTI Connext Professional and AUTOSAR Toolkit updates cover nineteen vulnerabilities with different component, architecture and configuration requirements. Match each deployed branch to its supported patch and plan rebuild, redeployment and interoperability checks.
HP Support Assistant 9.55.10.0 Fixes Local Privilege Escalation
HP Support Assistant before 9.55.10.0 has a local privilege-escalation flaw involving insufficient access controls. Update affected endpoints through HP's supported channel and verify installed versions; this is not an unauthenticated network attack.
CKAN MCP Server 0.4.108 Addresses an SSRF Validation Bypass
CKAN MCP Server can reach internal services through attacker-controlled DNS names. The advisory lists 0.4.108 as patched; update self-hosted deployments and restrict allowed destinations without treating the version claim as independently tested containment.
Sync-in Server Updates Fix 2FA, ReDoS, and Login Enumeration Flaws
Sync-in Server 2.4.1 addresses MFA weaknesses, costly sync-filter processing and login-timing enumeration. Update beyond 2.4.0, then check token enforcement, registration lockout and sync behavior with approved accounts.
NotebookLM MCP 2.0.3 Restricts Vault File Writes
NotebookLM MCP 2.0.3 sanitizes vault filenames, but directory containment remains opt-in. Upgrade affected servers, configure NOTEBOOKLM_VAULT_ROOT in the running process, and restrict its filesystem permissions; updating alone does not contain writes.