Showing posts with label patches. Show all posts

Google Releases Security Update for Chrome

by in , , , , , , , , , 0

Google has released Chrome version 45.0.2454.85 to address multiple vulnerabilities for Windows, Mac, and Linux. Exploitation of one of these vulnerabilities may allow an attacker to take control of an affected system.

US-CERT encourages users and administrators to review the Chrome Releases page and apply the necessary update.

Mozilla Releases Security Updates for Firefox

by in , , , , , , , , , 0

US-CERT released on Thursday, August 27th, 2015 that the Mozilla Foundation has released security updates to address a critical vulnerability in Firefox and Firefox ESR.  Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.

Available updates include:

  • Firefox 40.0.3
  • Firefox ESR 38.2.1

US-CERT encourages users and administrators to review the System Advisories for Firefox and Firefox ESR and apply the necessary updates.

Apple patches security flaws with new versions of iOS, OS X

by in , , , , , , , , , , , , 0

Apple has packed patches for dozens of security flaws into the new versions of its iOS and OS X operating systems.

The company noted Tuesday in a security advisory that just-released version 8.4 of the iOS mobile operating system contains more than 20 fixes for vulnerabilities that could lead to remote code execution, application termination and the interception of encrypted traffic, among other issues.


Read more about these updates here.

What you need to know about Heartbleed, a critical OpenSSL vulnerability that enables SSL/TLS decryption

by in , , , , , , , , , , , , 0

You know that little padlock icon you look for to ensure your Web traffic is encrypted and secure? It turns out that you might not be as secure as you think thanks to a vulnerability that was accidentally introduced into the code of OpenSSL.


Read this article which explains what you need to know about Heartbleed and OpenSSL.

Additional resources:

Major Apple security flaw found. Patches issued and should be applied.

by in , , , , , , , , , 0

Apple rushed to release iOS 7.0.6 on Friday and OS X 10.9.2 today with patches for a shockingly overlooked SSL encryption issue that leaves iPhone, iPad and Mac computer users open to a man-in-the-middle (MITM) attack.  All users of iOS 7 and Mac OS X Mavericks (10.9) should download and apply these patches.  The vulnerability is not present in versions of OS X prior to OS X 10.9 Mavericks or iOS prior to iOS 6.


Additonal resources:
For a full listing on the security patches in this update, visit the Apple site.

For a full listing on the security patches in this update, visit the Apple site.