Security Updates | 2007-09-27

Apple Inc.

APPLE-SA-2007-09-27 iPhone v1.1.1 Update
This update addresses several security issues with the iPhone. The update will be distributed via iTunes and will not be available via Software Update.

Cisco Systems Inc.

Catalyst 6500 and Cisco 7600 Series Devices Accessible via Loopback Address
Cisco Catalyst 6500 and Cisco 7600 Series devices use 127.0.0.0/8 IP addresses in the Ethernet Out-of-Band Channel for internal communication. Addresses from this range are accessible from outside the system. Administrators are encouraged to use an access control list to limit access to this IP range.

Microsoft Corporation

MS07-042 - Critical - Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227)
The vulnerability addressed in this bulletin could allow remote code execution if a user views a web page via Internet Explorer that is crafted to attack Microsoft XML Core Services. Customers are advised to apply this update immediately.

Red Hat, Inc.

RHSA-2007:0936 Important: kernel security update
This update addresses a flaw in IA32 system call emulation in the kernel packages for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact.

RHSA-2007:0937 Important: kernel security update
This update addresses a flaw in IA32 system call emulation in the kernel packages for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact.

RHSA-2007:0938 Important: kernel security update
This update addresses a flaw in IA32 system call emulation in the kernel packages for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact.

Sun Microsystems, Inc.

A Security Vulnerability in the Handling of Thread Contexts in the Solaris Kernel May Allow a Denial of Service
A race condition in the handling of thread contexts by the Solaris kernel could allow an unprivileged to panic the system. This issue affects Solaris 8, 9, and 10 on SPARC and X86 platforms. Patches are available via SunSolve.