Monday, March 29, 2021

Mozilla Thunderbird Updated

Mozilla have released updated version of their Thunderbird email client containing some fixes to security vulnerabilities.

Affected versions:
- Mozilla Thunderbird earlier than 78.9 (advisory)

Fresh version can be obtained via inbuilt updater or by downloading from the product site.

Mozilla Firefox Updated

Mozilla have released updated versions of their Firefox web browser. New versions fix security vulnerabilities.

Affected versions:
-Mozilla Firefox earlier than 87 (advisory)
-Mozilla Firefox ESR 78.x earlier than 78.9 (advisory)

Fresh version can be obtained via inbuilt updater or by downloading (latest version) from the product site.https://www.firefox.com/

Adobe ColdFusion Updated

Adobe have released updated version of ColdFusion web application development platform. This fix resolves a moderate categorized (CVE-2021-21087) vulnerability that could lead to arbitrary code execution.

Affected versions:
- ColdFusion (2021 release): version 2021.0.0.323925
- ColdFusion (2018 release): update 10 and earlier versions
- ColdFusion (2016 release): update 16 and earlier versions

More information can be read from Adobe's security bulletin.

Friday, March 19, 2021

Google Chrome Vulnerabilities Fixed

Google has released version 89.0.4389.90 for Windows, macOS and Linux. In addition to other changes the new version contains fixes to five security vulnerabilities.

More information can be read from Google Chrome releases blog.

Thursday, March 11, 2021

Adobe Animate Security Vulnerabilities Fixed

Adobe have released an updated version of their Adobe Animate. The new version fixes a critical vulnerability (CVE-2021-21052) that could allow arbitrary code execution in the context of the current user. Also five important categorized information disclosure vulnerabilities (CVE-2021-21072, CVE-2021-21073, CVE-2021-21074, CVE-2021-21075, CVE-2021-21076).

Affected versions
Adobe Animate earlier than 21.0.4

More information in the correspondent bulletin.

New Version Of Adobe Photoshop Available

Adobe have released new versions of Adobe Photoshop for Windows and Macintosh. These updates resolve two critical security vulnerabilities (CVE-2021-21082, CVE-2021-21067) which could lead to arbitrary code execution in the context of the current user.

Affected versions:
Adobe Photoshop 2020 versions 21.x earlier than 21.2.6
Adobe Photoshop 2021 versions 22.x earlier than 22.3

Instructions for updating are given in related security bulletin.

Adobe Connect Update Available

Adobe have released updated versions of Adobe Connect. This update resolves one critical improper input validation vulnerability (CVE-2021-21085) and three important categorized reflected cross-site scripting vulnerability (CVE-2021-21079, CVE-2021-21080, CVE-2021-21081). Successful exploitation could lead to arbitrary JavaScript execution within the context of the victim's browser.

Affected versions:
- Adobe Connect earlier than 11.2

More information can be read from Adobe's security bulletin.

Adobe Creative Cloud Desktop Application Updated

Adobe has released a security update to fix vulnerabilities in their Creative Cloud Desktop Application for Windows. Successful exploitation could lead to arbitrary file system write and privilege escalation in the context of the current user (CVE-2021-21068, CVE-2021-21078, CVE-2021-21069).

Affected versions:
Creative Cloud Desktop Application 5.3 and earlier versions for Windows

More information can be read from Adobe's security bulletin.

Adobe Framemaker Updated

Adobe has released an updated version of their Framemaker. New version contains fix to a critical security vulnerability (CVE-2021-21056). Successful exploitation of the vulnerability could lead to arbitrary code execution in the context of the current user.

Affected are versions 2019.0.8 and below for Windows.

More information from the Adobe's security advisory.

Microsoft Security Updates For March 2021

Microsoft have released security updates for March 2021.

Release notes of the updates can be viewed here.

Friday, March 5, 2021

Latest PHP Versions Available

PHP development team has released 8.0.3 and 7.4.16 versions of the PHP scripting language. New versions contain bug fixes. All PHP users are recommended to upgrade their versions to the latest release of the correspondent branch.

Changelogs:

Google Chrome updated

Google have released version 89.0.4389.72 for Windows, macOS and Linux. In addition to other changes the new version contains fixes to 47 security vulnerabilities.

More information can be read from Google Chrome releases blog.