Thursday, March 26, 2020

New iCloud Versions For Windows Released

Apple have released new versions of their iCloud client for Windows. New versions fix security vulnerabilities.

iCloud for Windows 10.9.3 is for Windows 10 and later and is available via Windows Store. iCloud for Windows 7.18 is available for Windows 7 and later.

More information about the security content of the new versions can be read from the correspondent security advisories:
-iCloud 10.9.3
-iCloud 7.18

ITunes 12.10.5 For Windows Released

Apple have released version 12.10.5 of their iTunes media player. New version fixes security vulnerabilities.

More information about the security content of iTunes 12.10.5 can be read from related security advisory.

Users of old versions should update to the latest one available.

Tuesday, March 24, 2020

VMware Updates Available

VMware have released updated versions of their virtualization software patching one important (CVE-2020-3950) and one low (CVE-2020-3951) categorized vulnerabilities.

Affected versions:
-VMware Workstation Pro/Player for Windows versions earlier than 15.5.2
-VMware Fusion Pro / Fusion versions earlier than 11.5.3
-Horizon Client for Windows and Mac 5.x & earlier versions before 5.4.0
-VMRC (VMware Remote Console) for Mac 11.x & earlier versions before 11.0.1

More information in VMware advisory here.

Foxit Studio Photo Updated

Foxit has released a new version of their Studio Photo application. Among other fixes the updated version patches multiple arbitrary code execution and information disclosure vulnerabilities.

Affected versions:
3.6.6.918 and earlier

More information can be read here. The latest version is downloadable here.

Adobe Creative Cloud Desktop Application Updated

Adobe has released a security update to fix a vulnerability in their Creative Cloud Desktop Application for Windows. Successful exploitation of the vulnerability could lead to arbitrary file deletion (CVE-2020-3808).

Affected versions:
Creative Cloud Desktop Application 5.0 and earlier versions for Windows

More information can be read from Adobe's security bulletin.

Unpatched Vulnerabilities In Microsoft Windows

Microsoft is aware of vulnerabilities in Adobe Type Manager Library in Microsoft Windows. The vulnerabilities may allow an attacker to execute arbitrary code in vulnerable system. These vulnerabilities are currently used in limited targeted attacks.

At the moment of writing this there is no update available but workaround instructions can be read from the related security advisory.

Monday, March 23, 2020

New Google Chrome Version Released

Google have released a version 80.0.3987.149 of their Chrome web browser. The new version contains 13 fixes to security vulnerabilities.

More information about changes can be viewed in Google Chrome Releases blog.