Microsoft has released security bulletin for the month of February 2015 to address vulnerabilities in Windows. Exploitation of these vulnerabilities could allow elevation of privilege, disclosure of information, remote code execution or security feature bypass.
Users and administrators are encouraged to review Microsoft Security Bulletins MS15-Feb and apply the necessary updates.
Alerts
Security Updates for Adobe Flash Player
Adobe has released security updates for Flash Player. These updates address critical vulnerability that could potentially allow an attacker to take control of the affected system.
Affected software versions are:-
.Adobe Flash Player 16.0.0.296 and earlier versions
.Adobe Flash Player 13.0.0.264 and earlier 13.x versions
.Adobe Flash Player 11.2.202.440 and earlier 11.x versions
The following update is available:-
.Adobe Flash Player 16.0.0.305 desktop runtime for Windows and Macintos
.Adobe Flash Player 13.0.0.269 for Adobe Flash Player Extended Support Release
.Adobe Flash Player 11.2.202.442 for Linux
.Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to version 16.0.0.305
Users and administrators are encouraged to review the Adobe Security Bulletins and apply the necessary updates.
Security Update for Google Chrome
Google has released Chrome 40.0.2214.111 for Windows, Mac and Linux. This update addresses multiple vulnerabilities (e.g. Use-after-free in DOM [CVE-2015-1209], Cross-origin-bypass in V8 bindings [CVE-2015-1210], Privilege escalation using service workers [CVE-2015-1211]) that could allow an attacker to cause a denial of service condition or obtain personal information.
Users and administrators are encouraged to review the Google Chrome release blog and apply the necessary updates
Click here for more information
Linux ‘Ghost’ Remote Code Execution Vulnerability
Linux GNU C Library versions prior to 2.18 are vulnerable. The vulnerability may allow an attacker to remotely take control of an affected system.
Users and administrators are recommended to refer to their respective Linux or Unix-based OS vendor(s) and update their system.
Apple Releases Security Updates for OS X, Safari, iOS and Apple TV
Apple has released a security updates for OS X, Safari, iOS and Apple TV to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow remote attackers to take control of a vulnerable system.
The following updates are available:-
- OS X v10.10.2 and Security Update 2015-001 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10 and v10.10.1
- Safari 8.0.3, Safari 7.1.3, and Safari 6.2.3 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.1
- iOS 8.1.3 for iPhone 4s and later, iPod touch 5th generation and later, and iPad 2 and later
- Apple TV 7.0.3 for Apple TV 3rd generation and later
Users and administrators are encouraged to review the Apple security updates and apply necessary updates.
More information can be found from HT204244, HT204243 HT204245 HT204246