Tanzania Computer Emergency Response Team

Elasticsearch has released security update to address a vulnerability in APM Java. Exploitation of this vulnerability may allow an attacker to gain escalated privilege. Users and administrators are encouraged to review Elasticsearch Security Advisory and apply necessary updates.

NetApp has released security updates to address vulnerabilities in Golang, PHP, jQuery and Linux kernel. Exploitation of these vulnerabilities may allow an attacker to gain access to sensitive information. Users and administrators are encouraged to review NetApp Security Advisories ntap-20211118-0006, ntap-20211118-0003, ntap-20211118-0005 and ntap-20211118-0004 and apply necessary updates.

Cisco has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are encouraged to review Cisco Security Advisories cisco-sa-snort-app-bypass-cSBYCATq and cisco-sa-ise-xss1-rgxYry2V and apply necessary updates.

Google has released security updates to address vulnerabilities in Chrome OS. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are encouraged to review Chrome Security Releases page and apply necessary updates.

Oracle has released security updates to address multiple vulnerabilities in Oracle Linux Enterprise. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are encouraged to review Oracle Linux Security Advisories for 13th November 2021 and apply necessary updates.