Tanzania Computer Emergency Response Team

Drupal has released security updates to address multiple vulnerabilities in Drupal 7.x, 8.5.x and 8.6.x. Exploitation of these vulnerabilities may allow a remote attacker to take control of affected system. Users and administrators are encouraged to review released Drupal security advisories SA-CORE-2019-001 and SA-CORE-2019-002 and apply necessary updates.

Oracle has released security updates to address multiple vulnerabilities to its products. Exploitation of these vulnerabilities may allow a remote attacker to take control of affected system. Users and administrators are encouraged to review released Oracle Security Advisory and apply necessary updates.

Google has released security updates to address vulnerabilities in Android Operating System. Exploitation of these vulnerabilities may allow remote attacker to execute arbitrary code within the context of a privileged process of affected system. Users and administrators are encouraged to review released Android Security Bulletins for the month of January …

Microsoft has released security updates for the month of January 2019 to address multiple vulnerabilities to its products. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Microsoft Release Note and Deployment Information and apply necessary updates.

The Multi-State Information Sharing and Analysis Center (MS-ISAC) has released an advisory to address multiple vulnerabilities in Hypertext Pre-processor (PHP). Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review released MS-ISAC Advisory and apply necessary updates.