Tanzania Computer Emergency Response Team

Apache Software Foundation has released security update to highlight vulnerability in Struts. This update address vulnerabilities that could potentially allow an attacker to take control of an affected system Affected software:   Struts 2.3.5 – Struts 2.3.31 Struts 2.5 – Struts 2.5.10 Solution: Upgrade to Struts version 2.3.32 or 2.5.10.1 …

Google has released Chrome versions 57.0.2987.98 for Windows, Mac and Linux. This update addresses multiple vulnerabilities that could allow an attacker to take control of an affected system. Users and administrators are encouraged to review the Google Chrome release blog and apply the necessary updates, click here for more information.

The Internet Systems Consortium (ISC) has released updates to address vulnerability in BIND.  The exploitation of this vulnerability could allow an attacker to cause a denial of service.   For more Information: Bind Updates.

CERT/CC has released information on the Server Message Block (SMB) vulnerability affecting Microsoft Windows. Exploitation of this vulnerability can allow attacker to cause denial of service or take control of the system. At this moment there is no known patch, however a mitigation technique can be used by filtering the …

Following the security advisory that was issued by WordPress on version 4.7.1 earlier last month, a new vulnerability has been discovered on wordpress version 4.7.2. TZ-CERT would like to encourage administrators to review the below and apply appropriate patches. For more Information: WordPress Advisory