WordPress 4.2.3 has been released to address critical cross-site scripting vulnerability. Exploitation of this vulnerability could allow a remote attacker to take control of an affected website.
Users and administrators are encouraged to review the WordPress security and maintenance released and apply the necessary updates.
For more information please visit:
WordPress < https://wordpress.org/news/2015/07/wordpress-4-2-3/>
The Internet Systems Consortium (ISC) has released security updates for BIND. These updates address vulnerability that could potentially allow an attacker to cause a denial of service condition.
The following update is available:-
(a) BIND 9-version 9.9.7-P2
(b) BIND 9-version 9.10.2-P3
Users and administrators are encouraged to review the ISC Knowledge Base and apply the necessary updates.
Click here < https://kb.isc.org/article/AA-01272> for more information
Cisco has released security advisory to address vulnerability in the Application Policy Infrastructure Controller (APIC), IOS software, Unified MeetingPlace Conferencing products. Exploitation of this vulnerability could allow an attacker to gain unauthorized access, cause a denial-of-service condition or take control of affected system.
Users and administrators are encouraged to review the Cisco security advisory released and apply the necessary updates.
For more information please visit:
cisco-sa-20150722-apic:< http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic>
cisco-sa-20150722-tftp:< http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp>
cisco-sa-20150722-mp:< http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-mp >
Google has released Chrome OS 44.0.2403.89 for Windows, Mac, and Linux to address multiple vulnerabilities. This update addresses vulnerabilities that could allow an attacker to obtain sensitive information.
Users and administrators are encouraged to review the Google Chrome release blog and apply the necessary updates.
Microsoft has released security updates to address vulnerabilities in Microsoft Windows. Exploitation of these vulnerabilities could allow an attacker to take control of affected systems.
Users and administrators are encouraged to review Microsoft Security Bulletins and apply the necessary updates.
Click here https://technet.microsoft.com/en-us/library/security/MS15-078 for more information.
Tanzania Computer Emergency Response Team