OpenSSL has released updates addressing multiple vulnerabilities. Exploitation of some of these vulnerabilities could potentially allow the attacker to cause a denial of service condition.

The following updates are available:

(a) OpenSSL 1.0.2 users should upgrade to 1.0.2e
(b) OpenSSL 1.0.1 users should upgrade to 1.0.1q
(c) OpenSSL 1.0.0 users should upgrade to 1.0.0t
(d) OpenSSL 0.9.8 users should upgrade to 0.9.8zh

Users and administrators are encouraged to review the advisory and apply the necessary updates;

click here for more information.

TZ-CERT has noted that there are android mobile applications (apps) named SoftBox Tanzania and SIMnet Tanzania, published under Google Play store  that are said to have functionalities of intercepting communications of mobile subscribers.

TZ-CERT wishes to advise the general public to avoid associating themselves with any activity related to the two published android mobile applications. Section 6 of the Cyber Crime Acts 2015 criminalize illegal interception, which is an act of intentionally intercepting one’s communication.

The Apache Commons team has announced the release of Apache Commons Collections 3.2.2, to address vulnerability affecting high profile projects such as Websphere, JBOSS, WebLogic and OpenNMS.
Please verify signatures using the KEYS file when downloading the release.For more information please click here.

Symantec has released security advisory to address vulnerability in Symantec endpoint protection product version 12.1. Exploitation of this vulnerability may allow remote attacker to take control of affected system.

Users and administrators are encouraged to review the advisory and apply the necessary updates.

For more information visit Symantec security advisory

Google has released security updates to address vulnerabilities in chrome and chrome OS. Exploitation of these vulnerabilities could allow attacker to take control of affected system.

Updates available include:

(a) Chrome 46.0.2490.86 for Windows, Mac and Linux
(b) Chrome 46.0.2490.82 for all OS devices

Users and administrators are encouraged to review released updates and apply necessary updates.

For more information visit Chrome and Chrome OS