Security Updates | 2009-09-23

I track security updates for the following vendors: Apple, Cisco, FreeBSD, Microsoft, Red Hat, and Sun Microsystems. I chose these vendors based on my own needs for the networks and systems I manage. I’ve also found that updates from these vendors tend to catch the major updates necessary for common software applications. If you have other vendors you would like me to provide updates for, send me a message.

If you have an interest in information security from both a technical and managerial level, check out Principles of Information Security. It does an excellent job of presenting material for both audiences.

Apple Inc.

• iTunes 9.0.1

 

Cisco Systems Inc.

• Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability
• Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability
• Cisco IOS Software Authentication Proxy Vulnerability
• Cisco Unified Communications Manager Express Vulnerability
• Cisco IOS Software Network Time Protocol Packet Vulnerability

Red Hat, Inc.

• RHSA-2009:1457 Important: kernel security update
• RHSA-2009:1459 Important: cyrus-imapd security update
• RHSA-2009:1461 Important: Red Hat Application Stack v2.4 security and enhancement update

Sun Microsystems, Inc.

• A Security Vulnerability in xscreensaver(1) May Display Portions of a Locked Desktop if the Screen is Resized
• A Security Vulnerability in Solaris Cluster 3.2 Configuration Utility (clsetup(1CL)) may Lead to Escalation of Privileges
• Buffer Underflow Vulnerability in the Solaris Tag Image File Format Library libtiff(3) may Lead to a Denial of Service (DoS) Condition