Tanzania Computer Emergency Response Team

Xerox has released security updates to address vulnerability affecting Docushare version 6.61, 7.0 and 7.5. Exploitation of these vulnerabilities could allow unauthenticated attacker to obtain sensitive information. Users and Administrators are encouraged to review Mini Bulletin XRX20W and apply necessary updates.

Apache has released security updates to address vulnerability affecting Apache Tomcat Apache Tomcat 10.0.0-M1-10.0.0-M9, 9.0.0.M5-9.0.39, and 8.5.1-8.5.59.  Exploitation of these vulnerabilities could allow unauthenticated attacker to obtain sensitive information. Users and Administrators are encouraged to review Apache Security Bulletin and apply necessary updates.

Drupal has released security updates to address vulnerabilities in Drupal 7, Drupal 8.8, Drupal 8.9 and Drupal 9.0. Exploitation of these vulnerabilities could allow an attacker to take control of an affected system. Users and Administrators are encouraged to review Drupal Security Advisory and apply necessary updates.

FortiGuard Labs has released security update to address vulnerability affecting FortiOS. Exploitation of this vulnerability could allow unauthenticated attacker to take control of an affected system. Users and Administrators are encouraged to review released FortiOS advisory and apply necessary updates.

Ubuntu has released security updates to address vulnerabilities in FreeRDP. Exploitation of these vulnerabilities could allow an attacker to take control of an affected system. Users and Administrators are encouraged to review Ubuntu security Notice and apply necessary updates.