Tanzania Computer Emergency Response Team

Elasticsearch has released security updates to address vulnerabilities in Elasticsearch versions 8.x.x and 7.x.x. Exploitation of these vulnerabilities may allow an attacker to cause a denial of service condition. Users and administrators are encouraged to review Elasticsearch Security Advisories elasticsearch-356315 and elasticsearch-356314 and apply necessary updates.

IBM has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review IBM Security Advisories dated 28th March 2024 and apply necessary updates.

F5 has released security updates to address a vulnerability in BIG-IP APM Clients. Exploitation of this vulnerability may allow an attacker to gain access to sensitive information. Users and administrators are encouraged to review F5 Security Advisory and apply necessary updates.

Citrix has released security updates to address vulnerabilities in Citrix Hypervisor. Exploitation of these vulnerabilities may allow an attacker to cause a denial of service condition. Users and administrators are encouraged to review Citrix Security Advisory and apply necessary updates.

NodeJS has released security updates to address vulnerabilities in NodeJS versions 18.x, 20.x, 21.x. Exploitation of these vulnerabilities may allow an attacker to gain escalated privilege. Users and administrators are encouraged to review NodeJS Security Advisory and apply necessary updates.