Sun Microsystems, Inc.
Installation of Sun Java System Access Manager 7.1 on Sun Java System Application Server 9.1 or 8.x May Compromise Application Server Security
Any application using container based authentication would no longer work correctly as any users would be granted access without authentication.

Categories: Security Updates

Sam Varshavchik has announced an updated release of the Courier Mail Server and Courier IMAP Server (Courier 20070921). Changes since the last release include

A looping SPF query is an UNKNOWN result
Ignore SIGPIPE errors in couriertcpd
SqWebMail - remove some hardcoded settings. Use SQWEBMAIL_RANDSEED to force the random number seed for URL redirectors.
Reject <@domain.com> return addresses
Include […]

Categories: Software

Interesting news from around the web for 2007-09-27:

RHBA-2007:0944 IBMJava2-JRE enhancement update - Updated IBMJava2-JRE packages that contain new timezone data are now available.
RHBA-2007:0929 Updated package java-1.5.0-sun - Updated java-1.5.0-sun packages that include new timezone data are now available.
RHEL-3: BEA Java 1.4.2: Update NZ zoneinfo - This release includes updates for the N.Z. Daylight Savings Time […]

Categories: Tech Messages

Apple Inc.
APPLE-SA-2007-09-27 iPhone v1.1.1 Update
This update addresses several security issues with the iPhone. The update will be distributed via iTunes and will not be available via Software Update.

Cisco Systems Inc.
Catalyst 6500 and Cisco 7600 Series Devices Accessible via Loopback Address
Cisco Catalyst 6500 and Cisco 7600 Series devices use 127.0.0.0/8 IP addresses in the Ethernet […]

Categories: Security Updates

Evan Hunt of Internet Systems Consortium, Inc. (ISC) has just sent an email announcing the release of BIND 9.2.9. The BIND DNS Server is a popular domain name server implementation.
This release will be the last maintenance release of BIND 9.2.
Although this is mainly a bug fix release (including 50+ bug fixes over […]

Categories: Software