Google has released Chrome OS 47.0.2526.73 for Windows, Mac, and Linux to address multiple vulnerabilities. The update addresses vulnerabilities that could allow an attacker to take control of an affected system.

Users and administrators are encouraged to review the Google Chrome release blog and apply the necessary updates;
click here for more information.

OpenSSL has released updates addressing multiple vulnerabilities. Exploitation of some of these vulnerabilities could potentially allow the attacker to cause a denial of service condition.

The following updates are available:

(a) OpenSSL 1.0.2 users should upgrade to 1.0.2e
(b) OpenSSL 1.0.1 users should upgrade to 1.0.1q
(c) OpenSSL 1.0.0 users should upgrade to 1.0.0t
(d) OpenSSL 0.9.8 users should upgrade to 0.9.8zh

Users and administrators are encouraged to review the advisory and apply the necessary updates;

click here for more information.

TZ-CERT has noted that there are android mobile applications (apps) named SoftBox Tanzania and SIMnet Tanzania, published under Google Play store  that are said to have functionalities of intercepting communications of mobile subscribers.

TZ-CERT wishes to advise the general public to avoid associating themselves with any activity related to the two published android mobile applications. Section 6 of the Cyber Crime Acts 2015 criminalize illegal interception, which is an act of intentionally intercepting one’s communication.

The Apache Commons team has announced the release of Apache Commons Collections 3.2.2, to address vulnerability affecting high profile projects such as Websphere, JBOSS, WebLogic and OpenNMS.
Please verify signatures using the KEYS file when downloading the release.For more information please click here.

Symantec has released security advisory to address vulnerability in Symantec endpoint protection product version 12.1. Exploitation of this vulnerability may allow remote attacker to take control of affected system.

Users and administrators are encouraged to review the advisory and apply the necessary updates.

For more information visit Symantec security advisory