Security Updates | 2009-03-25

I track security updates for the following vendors: Apple, Cisco, FreeBSD, Microsoft, Red Hat, and Sun Microsystems. I chose these vendors based on my own needs for the networks and systems I manage. I’ve also found that updates from these vendors tend to catch the major updates necessary for common software applications. If you have other vendors you would like me to provide updates for, send me a message.

Cisco Systems Inc.

• Cisco IOS Software WebVPN and SSLVPN Vulnerabilities
• Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
• Cisco IOS Software Secure Copy Privilege Escalation Vulnerability
• Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities
• Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability
• Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
• Cisco IOS Software Multiple Features IP Sockets Vulnerability
• Cisco IOS cTCP Denial of Service Vulnerability

Red Hat, Inc.

• RHSA-2009:0258 Moderate: thunderbird security update
• RHSA-2009:0336 Moderate: glib2 security update
• RHSA-2009:0361 Moderate: NetworkManager security update
• RHSA-2009:0362 Moderate: NetworkManager security update
• RHSA-2009:0369 Critical: java-1.6.0-ibm security update
• RHSA-2009:0376 Critical: acroread security update

Sun Microsystems, Inc.

• Multiple Security Vulnerabilities in Java Plug-in May Allow Privileges to be Escalated
• Sun Java System Identity Manager Security Vulnerabilities
• Security Vulnerabilities in the Java Runtime Environment (JRE) LDAP Implementation may Allow a Denial of Service (DoS) and Malicious Code to be Executed
• A Security Vulnerability in the Java Runtime Environment (JRE) Virtual Machine With Code Generation May Allow Escalation of Privileges
• A Security Vulnerability in the Java Runtime Environment (JRE) HTTP Server Implementation May Allow a Denial of Service (DoS) Condition on a JAX-WS Service Endpoint
• Security Vulnerabilities in the Java Runtime Environment (JRE) With Storing and Processing Font Files May Allow Denial of Service (DOS)