本ブログは、Microsoft resolves four SSRF vulnerabilities in Azure cloud services の抄訳版です。最新の情報は原文を参照してください。 概要
Category: Uncategorized
Microsoft resolves four SSRF vulnerabilities in Azure cloud services
Summary Summary Microsoft recently fixed a set of Server-Side Request Forgery (SSRF) vulnerabilities in four Azure services (Azure API Management, Azure Functions, Azure Machine Learning, and Azure Digital Twins) reported by Orca Security. These SSRF vulnerabilities were determined to be low risk as they do not allow access to sensitive information or Azure backend services.
セキュリティ更新プログラムガイド CVRF API での CBL-Mariner CVE の 公開について
本ブログは、Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API の抄訳版です。最新の情報は原文を参照してください。
Generally Available: Azure Red Hat OpenShift in Brazil Southeast
Azure Red Hat OpenShift is now available in Brazil Southeast region.
セキュリティ更新プログラムガイドの改善 – ホットパッチ更新プログラムの記載
本ブログは、Security Update Guide Improvement – Representing Hotpatch Updatesの抄訳版です。最新の情報は原文を参照してくださ
Google Workspace Updates Weekly Recap – January 6, 2023
There are no new updates or previous announcements this week. Please see below for rollout progress for previously announced features.
Completed rollouts
The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.
Rapid Release Domains:
- Easily format and display code in Google Docs
- Note: Rollout will be completed on Monday, January 9.
Scheduled Release Domains:
Rapid and Scheduled Release Domains:
For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).
Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API
Microsoft is pleased to announce that beginning January 11, 2023, we will publish CBL-Mariner CVEs in the Security Update Guide (SUG) Common Vulnerability Reporting Framework (CVRF) API. CBL-Mariner is a Linux distribution built by Microsoft to power Azure’s cloud and edge products and services and is currently in preview as an AKS Container Host.
General availability: Apache log4J2 sink to Azure Data Explorer
Azure Data Explorer now supports ingestion of data from Apache Log4j 2.
General Availability: Azure Sphere support for European Data Boundary
Azure Sphere Security Service EU data processing and storage is now generally available.