Tanzania Computer Emergency Response Team

PHP has released security updates to address vulnerabilities in PHP 7.2.x prior to version 7.2.9 and PHP 7.1.x prior to version 7.1.21. Exploitation of vulnerabilities could allow an attacker to take control of an affected system. Users and Administrators are encouraged to review PHP News Page and MS-ISAC Advisory and …

Apache Software Foundation has released security update to address vulnerabilities in Apache Tomcat Native Connector. Exploitation of these vulnerabilities could allow an attacker to take control of an affected system. Users and Administrators are encouraged to review Apache Security Advisory  and Apache Tomcat download page and apply necessary updates.

Cisco has released security updates to address vulnerabilities to its products. An unauthenticated remote attacker may exploit these vulnerabilities to cause denial of service (DoS) condition. Users and Administrators are encouraged to review cisco-sa-20180815-wsa-dos and cisco-sa-20180815-ucmimps-dos cisco security advisories and apply necessary updates.

Samba has released security updates to address vulnerabilities to its multiple products. Exploitation of these vulnerabilities may allow attacker to take control of an affected system. Users and Administrators are encouraged to review released Samba security advisories and apply necessary updates. For more information click CVE-2018-10858, CVE-2018-10918 , CVE-2018-10919, CVE-2018-1139 …

Intel has released security advisory to address vulnerability in microprocessor products supporting Intel® Software Guard Extensions (Intel® SGX). Exploitation of this vulnerability may allow an attacker to obtain sensitive information. Users and Administrators are encouraged to review Intel’s Security Advisory INTEL-SA-00161 and apply necessary updates.