Security Updates | 2009-01-23

I track security updates for the following vendors: Apple, Cisco, FreeBSD, Microsoft, Red Hat, and Sun Microsystems. I chose these vendors based on my own needs for the networks and systems I manage. I’ve also found that updates from these vendors tend to catch the major updates necessary for common software applications. If you have other vendors you would like me to provide updates for, send me a message.

Microsoft Corporation

• Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203)
• Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)

Red Hat, Inc.

• RHSA-2009:0009 Important: kernel security and bug fix update

Sun Microsystems, Inc.

• A Solaris Kernel Security Vulnerability on Systems Using the Sun UltraSPARC T2 and T2+ Processors May Allow Denial of Service (DoS)
• A Security Vulnerability in Sun Java System Application Server May Expose an Application’s WEB-INF and META-INF Content
• Security Vulnerability with IKE Packet Handling in Solaris libike Library may Lead to a Crash of in.iked(1M)
• Security Vulnerability in the Solaris Pseudo-terminal Driver (pty(7D)) may Cause a System Panic