{"id":335702,"date":"2026-05-16T15:04:31","date_gmt":"2026-05-16T09:34:31","guid":{"rendered":"https:\/\/ebiztoday.news\/?p=335702"},"modified":"2026-05-16T15:04:31","modified_gmt":"2026-05-16T09:34:31","slug":"for-may-patch-tuesday-means-139-updates-but-no-zero-days-computerworld","status":"publish","type":"post","link":"https:\/\/ebiztoday.news\/index.php\/2026\/05\/16\/for-may-patch-tuesday-means-139-updates-but-no-zero-days-computerworld\/","title":{"rendered":"For May, Patch Tuesday means 139 updates \u2014 but no zero-days \u2013 Computerworld"},"content":{"rendered":"<div>\n<p>Add these Microsoft updates to your standard developer update release schedule.<\/p>\n<h2 class=\"wp-block-heading\" id=\"adobe-and-third-party-updates\">Adobe (and third-party updates)<\/h2>\n<p>I keep promising that this section needs to be retired (and it should), but Microsoft released a large third-party sweep through <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-linux\/\">Azure Linux 3.0<\/a> and <a href=\"https:\/\/github.com\/microsoft\/CBL-Mariner\">CBL Mariner 2.0<\/a> this month: 191 open-source CVEs spanning the Linux kernel, the Go runtime, Apache httpd, PHP, CoreDNS, valkey, Ruby, gnutls, Apache Thrift across its Node.js, Rust, and Java implementations, plus vim, postfix, expat, nmap, Prometheus, KEDA, and PgBouncer. That is lots for anyone.<\/p>\n<p>Along with all this, Microsoft issued a patch (<a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-41103\">CVE-2026-4<\/a><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-41103\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-41103\">103<\/a>) for its own <a href=\"https:\/\/marketplace.atlassian.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">SSO Plugin for Jira and Confluence<\/a>. This vulnerability allows an attacker to forge a <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/microsoft-entra\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Entra ID<\/a> identity via a crafted SAML response; patching requires updating the plugin inside Atlassian quite than on a Microsoft platform. In other words, the Microsoft attack surface now extends to other vendors\u2019 application stacks, with patching responsibilities split across vendors.\u00a0<\/p>\n<\/div>\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Add these Microsoft updates to your standard developer update release schedule. Adobe (and third-party updates) I keep promising that this section needs to be retired (and it should), but Microsoft released a large third-party sweep through Azure Linux 3.0 and CBL Mariner 2.0 this month: 191 open-source CVEs spanning the Linux kernel, the Go runtime, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":335703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[17165,7367,578,5673,2829,51792],"class_list":["post-335702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-computerworld","tag-means","tag-patch","tag-tuesday","tag-updates","tag-zerodays"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts\/335702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/comments?post=335702"}],"version-history":[{"count":2,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts\/335702\/revisions"}],"predecessor-version":[{"id":335705,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts\/335702\/revisions\/335705"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/media\/335703"}],"wp:attachment":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/media?parent=335702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/categories?post=335702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/tags?post=335702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}