Home

Virus Removal

Our industrial strength scanners are the most advanced available
We take the time to manually check 31 critical areas
We check that all your hardware is functioning correctly
Operating system corruption can cause performance issues
When we are done your device will be SAFE, SECURE and OPTIMIZED.

Sales

Compumaster offers "Off Lease" equipment at a fraction of the new cost.
Laptops and Desktops are always available.
They are in mint condition
You get a 1 year warranty
Call or pop in for a casual chat about your needs.

2 days ago
Ron at COMPU-MASTER is highly recommended. He readily helps others navigate through the complex field of computers making it look easy. As well he manages to maintain a steady flow of helpfulness as his phone rings continually and there is a steady flow of people through his front door, all the while answering customers questions. In essence Ron provides a community service of which many are appreciative. Thanks greatly Ron. Jennifer K.

Cait Banks

1 review

3 months ago

Ron is literally the best. Take your computer there, you can trust him with anything. Saved me in so many computer jams. Amazing customer service and will take his time explaining things to you even if you ask 500 questions. THE BEST. - Cait

Threats/Scams

Dell security advisory (AV25-865)
Serial number:AV25-865
Date:December 29, 2025

Between December 22 and 28, 2025, Dell published security advisories to address vulnerabilities in the following products:

Dell Storage Resource Manager (SRM) – version prior to 6.0.0.1

Dell Storage Monitoring and Reporting (SMR) – version prior to 6.0.0.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

Dell DSA-2025-455

Dell Security advisories and notices
VMware security advisory (AV25-864)
Serial number:AV25-864
Date:December 29, 2025

Between December 22 and 28, 2025, VMware published security advisories to address critical vulnerabilities in multiple Tanzu products:

AI Services for VMware Tanzu Platform – versions prior to 10.3.2

Application Services for VMware Tanzu Platform – versions prior to 3.3.13

Elastic Application Runtime Windows add-on for VMware Tanzu Platform – versions prior to 10.2.6+LTS-T, 10.3.2 and 6.0.23+LTS-T

Healthwatch – versions prior to 2.3.4

Isolation Segmentation for VMware Tanzu Platform – versions prior to 10.2.6+LTS-T, 10.3.2 and 6.0.23+LTS-T

Java Buildpack – versions prior to 4.86.0

Stemcells (Windows) – versions prior to 2019.93.x

Tanzu Hub – versions prior to 10.3.2

VMware Tanzu for Postgres on Tanzu Platform – versions prior to 10.2.2

VMware Tanzu GemFire on Tanzu Platform – versions prior to 2.2.1

VMware Tanzu Greenplum – versions prior to 7.7.0

VMware Tanzu Greenplum SQL Editor – versions prior to 1.2.1

VMware Tanzu RabbitMQ on Tanzu Platform – versions prior to 10.1.1

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

Security Advisories – Tanzu

Numéro de série :AV25-864
Date :29 décembre 2025

Du 22 au 28 décembre, 2025, VMware a publié des bulletins de sécurité visant à corriger des vulnérabilités critiques liées à de multiples produits Tanzu.

AI Services for VMware Tanzu Platform – versions antérieures à 10.3.2;

Application Services for VMware Tanzu Platform – versions antérieures à 3.3.13;

Elastic Application Runtime Windows add-on for VMware Tanzu Platform – versions antérieures à 10.2.6+LTS-T, 10.3.2 et 6.0.23+LTS-T;

Healthwatch – versions prior to 2.3.4;

Isolation Segmentation for VMware Tanzu Platform – versions antérieures à 10.2.6+LTS-T, 10.3.2 et 6.0.23+LTS-T;

Java Buildpack – versions antérieures à 4.86.0;

Stemcells (Windows) – versions antérieures à 2019.93.x;

Tanzu Hub – versions antérieures à 10.3.2;

VMware Tanzu for Postgres on Tanzu Platform – versions antérieures à 10.2.2;

VMware Tanzu GemFire on Tanzu Platform – versions antérieures à 2.2.1;

VMware Tanzu Greenplum – versions antérieures à 7.7.0;

VMware Tanzu Greenplum SQL Editor – versions antérieures à 1.2.1;

VMware Tanzu RabbitMQ on Tanzu Platform – versions antérieures à 1.1.

Le Centre pour la cybersécurité recommande aux utilisatrices, aux utilisateurs, aux administratrices et aux administrateurs de consulter la page Web ci‑dessous et d'appliquer les mises à jour nécessaires.

Security Advisories - Tanzu (en anglais seulement)
IBM security advisory (AV25-863)
Serial number:AV25-863
Date:December 29, 2025

Between December 22 and 28, 2025, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

IBM API Connect – versions 10.0.8.0 to 10.0.8.5 and V10.0.11.0

IBM API Connect Enterprise – versions 13.0.1.0 to 13.0.5.2 and 12.0.1.0 to 12.0.12.20

IBM Big SQL on IBM Cloud Pak for Data – multiple versions

IBM Business Automation Insights – versions 25.0.0, 24.0.1 and 24.0.0

IBM CICS TX Advanced – versions 10.1 and 11.1

IBM CICS TX Standard – version 11.1

IBM CICS Transaction Gateway Desktop Edition – versions 9.1, 9.2, 9.3 and 10.1

IBM CICS Transaction Gateway for Multiplatforms – versions 9.1, 9.2, 9.3 and 10.1

IBM Concert Software – version 1.0.0 to 2.1.0

IBM DataPower Gateway 10.6CD – versions 10.6.1.0 to 10.6.5.0

IBM Edge Data Collector – versions 9.1, 9.0 and 8.11

IBM Maximo Application Suite - Monitor Component – versions 9.1, 9.0, 8.11 and 8.10

IBM Maximo Application Suite – AI Service – version 9.1

IBM Netezza Appliance – version 1.0.0.0

IBM Sterling Connect:Direct File Agent – versions 1.4.0.0 to 1.4.0.5_iFix001 on Solaris SPARC

IBM Sterling Connect:Direct File Agent – versions 1.4.0. to 1.4.0.5 with bundles JRE on AIX, Linux X64, Linux PPC and Windows

IBM StreamSets Data Collector – versions 5.0.0 to 6.4.1

IBM Tivoli Application Dependency Discovery Manager – versions 7.3.0.0 to 7.3.0.11

IBM Total Storage Service Console (TSSC) / TS4500 IMC – multiple versions

IBM TXSeries for Mutiplatforms – versions 8.2, 9.1, 10.1 and 11.1

IBM webMethods Managed File Transfer (on-prem) – version 11.1

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

IBM Product Security Incident Response

AL25-021 - Vulnerability affecting MongoDB - CVE-2025-14847

Number: AL25-021
Date: December 29, 2025

Audience

This Alert is intended for IT professionals and managers.

Purpose

An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested.

Details

The Cyber Centre is aware of a high-severity vulnerability in MongoDB Server^Footnote1. In response to the vendor advisory released on December 19, 2025, the Cyber Centre issued AV25-862^Footnote2 on December 24, 2025.

Tracked as CVE-2025-14847^Footnote3, this vulnerability allows an unauthenticated remote attacker to read uninitialized heap memory due to mismatched length fields (CWE-130)^Footnote4 in zlib-compressed protocol headers. The vulnerability occurs prior to authentication and affects multiple supported and legacy MongoDB versions.

The Cyber Centre has observed open-source reporting indicating that multiple Proofs of Concept (PoC) are available and that this vulnerability is being exploited in the wild^Footnote5.

Suggested actions

The Cyber Centre recommends that organizations upgrade affected MongoDB Server(s) to a fixed version:

Affected product	Affected version	Fixed version
MongoDB 8.2	8.2.0 – 8.2.2	8.2.3
MongoDB 8.0	8.0.0 – 8.0.16	8.0.17
MongoDB 7.0	7.0.0 – 7.0.27	7.0.28
MongoDB 6.0	6.0.0 – 6.0.26	6.0.27
MongoDB 5.0	5.0.0 – 5.0.31	5.0.32
MongoDB 4.4	4.4.0 – 4.4.29	4.4.30
MongoDB 4.2	All versions	No vendor fix; upgrade to fixed version
MongoDB 4.0	All versions	No vendor fix; upgrade to fixed version
MongoDB 3.6	All versions	No vendor fix; upgrade to fixed version

If immediate patching is not possible, reduce exposure by:

Disabling zlib compression by starting mongod/mongos with networkMessageCompressors or net.compression.compressors options that omit zlib (use snappy or zstd).
Restricting network access to MongoDB to trusted IPs; avoid direct internet exposure.

As a precaution, it is recommended that organizations review their logs for potential signs of compromise including:

Monitor MongoDB logs for anomalous pre-authentication connections or unexpected errors.

In addition, the Cyber Centre strongly recommends that organizations review and implement the Cyber Centre’s Top 10 IT Security Actions with an emphasis on the following topics^Footnote6.

Patch operating systems and applications
Harden operating systems and applications
Isolate web-facing applications

Should activity matching the content of this alert be discovered, recipients are encouraged to report via My Cyber Portal, or email contact@cyber.gc.ca.

References

MongoDB security advisory (AV25-862) - Update 1
Serial number: AV25-862
Date: December 24, 2025
Updated: December 29, 2025

On December 15, 2025, MongoDB published a security advisory to address a vulnerability in the following products:

MongoDB – versions 8.2.0 to 8.2.2

MongoDB – versions 8.0.0 to 8.0.16

MongoDB – versions 7.0.0 to 7.0.26

MongoDB – versions 6.0.0 to 6.0.26

MongoDB – versions 5.0.0 to 5.0.31

MongoDB – versions 4.4.0 to 4.4.29

MongoDB Server v4.2 – all versions

MongoDB Server v4.0 – all versions

MongoDB Server v3.6 – all versions

Update 1

On December 29, 2025, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-14847 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

MongoDB - Make minimally sized buffers for uncompressed Messages (CVE-2025-14847)

CISA KEV : CVE-2025-14847
TeamViewer security advisory (AV25-861)
Serial number:AV25-861
Date:December 23, 2025

On December 11, 2025, TeamViewer published security advisories to address vulnerabilities in the following products:

TeamViewer DEX Client – NomadBranch.exe – versions prior to 1E Client 25.11.0.29

TeamViewer DEX Client – NomadBranch.exe – versions prior to 1E Client 25.9.0.46 - HF-PLTPKG-524 (Hotfix)

TeamViewer DEX Client – NomadBranch.exe – versions prior to 1E Client 25.5.0.53 - HF-PLTPKG-526 (Hotfix)

TeamViewer DEX Client – NomadBranch.exe – versions prior to 1E Client 24.5.0.69 - HF-PLTPKG-525 (Hotfix)

TeamViewer DEX – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

Improper input validation in TeamViewer

Command Injection and Privilege Escalation vulnerabilities in TeamViewer

TeamViewer Trust Center