ITunes 12.9 Released

Apple have released version 12.9 of their iTunes media player. New version fixes security vulnerabilities.

More information about the security content of iTunes 12.9 can be read from related security advisory.

Users of old versions should update to the latest one available.

Vulnerability In Microsoft Windows JET Database Engine

There has been found a critical vulnerability in Microsoft Windows JET Database Engine. By exploiting the vulnerability an attacker may execute arbitrary code in vulnerable system under the context of the current process. To exploit the vulnerability user interaction is needed.

At the moment there's no patch available against the vulnerability. In the absence of a fix special caution should be exercised without opening suspicious and from untrusted sources received files.

More information in Zero Day Initiative's blog post.

Mozilla Firefox Updated

Mozilla have released updated versions of Firefox browser to address security vulnerabilities.

Affected products are:
- Mozilla Firefox earlier than 62.0.2 (advisory)
- Mozilla Firefox earlier than ESR 60.2.1 (advisory)

Fresh version can be obtained via inbuilt updater or by downloading from the product site (the latest version):
Firefox

Adobe Reader And Acrobat Security Updates

Adobe have released security updates to fix some vulnerabilities in their PDF products, Adobe Reader and Adobe Acrobat. The vulnerabilities could allow an attacker to execute arbitrary code in the context of the current user in the affected system.

Affected versions:
*Acrobat DC and Acrobat Reader DC, continuous track
version 2018.011.20063 and earlier

*Acrobat 2017 and Acrobat Reader 2017
version 2017.011.30099 and earlier

*Acrobat DC and Acrobat Reader DC, classic track
version 2015.006.30448 and earlier


Users of vulnerable versions are instructed to update their versions either by using automatic update functionality or by downloading fresh version manually. The default installation configuration runs automatic updates on a regular schedule and can be manually activated by choosing Help > Check for Updates.

Those who want to upgrade manually, can download the latest versions of the links below:
Adobe Reader
Adobe Acrobat

More information about fixed vulnerabilities can be read from Adobe's security bulletin.

Latest PHP Versions Available

PHP development team has released 7.2.10, 7.1.22, 7.0.32 and 5.6.38 versions of the PHP scripting language Among other minor bugs one security bug have been fixed. All PHP users are recommended to upgrade their versions to the latest release of the correspondent branch.

Changelogs:
Version 7.2.10
Version 7.1.22
Version 7.0.32
Version 5.6.38

Symantec Intelligence Report: August 2018

Symantec have published their Intelligence report that sums up the latest threat trends for August 2018.

The report can be viewed here.

Google Chrome Updated

Google have released a version 69.0.3497.92 of their Chrome web browser. New version contains fixes to two security vulnerabilities. More information about changes in Google Chrome Releases blog.