Google has released Chrome OS 42.0.2311.90 for Windows, Mac, and Linux to address multiple vulnerabilities. This update addresses vulnerabilities that could allow an attacker to take control of an affected system.
Users and administrators are encouraged to review the Google Chrome release blog and apply the necessary updates.
Click here for more information
Microsoft has released a security bulletin for April 2015 to address vulnerabilities in Windows. Exploitation of these vulnerabilities could allow elevation of privilege, disclosure of information, remote code execution, spoofing or security feature bypass
Users and administrators are encouraged to review Microsoft Security Bulletins MS15-Apr and apply the necessary updates.
Click here for more information
Apple has released a security updates for OS X, iOS, Safari and Apple TV to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to take control of an affected system.
The following updates are available:
(a) OS X Yosemite v10.10.3 and Security Update 2015-004 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10 to v10.10.2
(b) iOS 8.3 for iPhones 4s and later, iPod touch 5th generation and later, and iPad 2 and later
(c) Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2
(d) Apple TV 7.2 for Apple TV 3rd generation and later
Users and administrators are encouraged to review the Apple security update and apply the necessary updates.
For more information click: HT204659, HT204661, HT204658 and HT204662
Network Time Protocol (NTP) Project has released security updates to address multiple vulnerabilities in Network Time Protocol daemon (ntpd). This update addresses vulnerabilities that may allow an attacker to conduct a man-in-the-middle attack or cause a denial of service condition.
Users and administrators are encouraged to review the NTP security notice and take necessary actions.
Click here for more information.
Mozilla Foundation has release Firefox 37.0.1 to address two vulnerabilities; one of these vulnerabilities could allow an attacker to conduct man-in-the-middle attacks.
Users and administrators are encouraged to review the Security advisories released from Mozilla Foundation and apply the necessary updates.
Tanzania Computer Emergency Response Team