News
Vendor releases, pricing and licensing changes, and security events that affect how African organisations build and buy software. Every item links to its primary sources and explains why it matters to you.
Use a feed reader? RSS feed
-
· GitLab
GitLab 19.4.2 critical patch fixes a CVSS 10.0 code execution flaw in self-managed GitLab
Self-managed GitLab on 19.2, 19.3 or 19.4 is exposed to a flaw rated 10.0 that could let an unauthenticated attacker run code on the server. GitLab.com is already patched and Dedicated needs no action, so the work sits with self-managed teams.
-
· Security
JFrog uncovers 'Equation of Compromise', a targeted npm campaign hiding in a mathjs look-alike
Popularity is no longer a safe signal: this campaign faked millions of npm downloads to look trustworthy. Teams that pull packages straight from public registries need curation and malicious-package scanning in front of developers and build agents.
-
· Licensing
Office LTSC 2021, Project LTSC 2021 and Visio LTSC 2021 reach end of support on 13 October 2026
Organisations still on perpetual Office 2021 will stop receiving security fixes. Staying put adds security and compliance risk, so buyers need to choose between Microsoft 365 subscriptions and the 2024 LTSC versions.
-
· Licensing
Microsoft 365 Copilot Business: usage-based billing on by default for new CSP licences from 1 December
Copilot Business buyers will get pay-as-you-go usage enabled out of the box. Without spending policies, extra AI usage can appear on the bill on top of the licence, so finance and IT need to agree limits before December.