Saturday, December 21, 2019

VMware Updates Available

VMware have released updated versions of their virtualization software patching one moderate (CVE-2019-5539) categorized vulnerability.

Affected versions:
-Horizon Client for Windows 7.x.x earlier than 7.11.0 or 7.10.1 or 7.5.4
-VMware Workstation Pro/Player versions earlier than 15.5.1

More information in VMware advisory here.

New Google Chrome Version Released

Google have released a version 79.0.3945.88 of their Chrome web browser. The new version contains a fix to a security vulnerability.

More information about changes can be viewed in Google Chrome Releases blog.

WordPress 5.3.2 Released

There has been released a new version of WordPress (blogging tool and content management system). Version 5.3.2 fixes a few high severity bugs that were found after the version 5.3.1 release (it contained also fixes to security vulnerabilities).

Affected versions:
WordPress versions earlier than 5.3.2

More information can be read from the WordPress blog.

Mozilla Thunderbird Update Available

Mozilla have released an updated version of their Thunderbird email client containing fixes to security vulnerabilities.

Affected versions:
Mozilla Thunderbird versions earlier than 68.3

Fresh version can be obtained via inbuilt updater or by downloading from the product site.

Mozilla Firefox Updated

Mozilla have released updated versions of their Firefox web browser. New versions fix security vulnerabilities.

Affected versions:
-Mozilla Firefox earlier than 71 (advisory)
-Mozilla Firefox ESR 68.x earlier than 68.3 (advisory)

Fresh version can be obtained via inbuilt updater or by downloading (latest version) from the product site.

Adobe ColdFusion Fix Available

Adobe have released updated version of ColdFusion web application development platform. This fix resolves one important categorized (CVE-2019-8256) vulnerability which may allow privilege escalation.

Affected versions:
- ColdFusion (2018 release): update 6 and earlier versions

More information can be read from Adobe's security bulletin.

New Version Of Adobe Brackets Available

Adobe have released new versions of Adobe Brackets for Windows, Linux and MacOS. These updates resolve a critical categorized vulnerability which could lead to arbitrary code execution in the context of the current user.

Affected versions:
Adobe Brackets 1.14 and earlier versions (Windows, Linux and macOS)

Solution:
Update to Adobe Brackets 1.14.1 version

Instructions for updating are given in related security bulletin.