Security Updates | 2009-02-04

I track security updates for the following vendors: Apple, Cisco, FreeBSD, Microsoft, Red Hat, and Sun Microsystems. I chose these vendors based on my own needs for the networks and systems I manage. I’ve also found that updates from these vendors tend to catch the major updates necessary for common software applications. If you have other vendors you would like me to provide updates for, send me a message.

Cisco Systems Inc.

• Multiple Vulnerabilities in Cisco Wireless LAN Controllers

Red Hat, Inc.

• RHSA-2009:0053 Important: kernel-rt security and bug fix update
• RHSA-2009:0256 Critical: firefox security update
• RHSA-2009:0257Critical: seamonkey security update

Sun Microsystems, Inc.

• Security Vulnerability in the Solaris “autofs” Kernel Module may Allow a Local Unprivileged User to Execute Arbitrary Code
• Security Vulnerability in Solaris BIND named(1M) due to Incorrect DNSSEC Signature Verification
• A Security Vulnerability in Sun Java System Access Manager May Allow a Remote Unprivileged User to Determine the Existence of “guessed” Usernames
• A Security Vulnerability in Solaris IPv6 Implementation (ip6(7p)) May Cause a System Panic
• Security Vulnerabilities in the Embedded Lights Out Manager (ELOM) on Sun Fire X2100 M2 and X2200 M2 May Allow Unauthorized Logins
• A Security Vulnerability in the Solaris ip(7P) Kernel Module’s IP-in-IP Packet Processing May Lead to a Denial of Service (DoS)
• Security Vulnerability in OpenSSL due to Improper Usage of Signature
• Security Vulnerability in the Solaris IP(7p) Implementation, Related to Minor Number Allocation, may Lead to a Denial of Service (DoS) Condition
• Security Vulnerabilities in the libxml2 Library Routines xmlBufferResize() and xmlSAX2Characters() May Lead to Arbitrary Code Execution or Denial of Service (DoS)