Security Updates | 2009-10-07

I track security updates for the following vendors: Apple, Cisco, FreeBSD, Microsoft, Red Hat, and Sun Microsystems. I chose these vendors based on my own needs for the networks and systems I manage. I’ve also found that updates from these vendors tend to catch the major updates necessary for common software applications. If you have other vendors you would like me to provide updates for, send me a message.

If you have an interest in information security from both a technical and managerial level, check out Principles of Information Security. It does an excellent job of presenting material for both audiences.

The FreeBSD Project

• kqueue pipe race conditions
• Devfs / VFS NULL pointer race condition

Red Hat, Inc.

• RHSA-2009:1469 Important: kernel security update
• RHSA-2009:1470 Moderate: openssh security update
• RHSA-2009:1471 Important: elinks security update
• RHSA-2009:1472 Moderate: xen security and bug fix update

Sun Microsystems, Inc.

• Security Vulnerability in the VBoxNetAdpCtl Configuration Tool for Sun VirtualBox May Lead to Escalation of Privileges
• Security Vulnerabilities in Firefox Versions Before 3.5.3 May Allow Execution of Arbitrary Code, Access to Unauthorized Data, or Denial of Service (DoS)
• Security Vulnerabilities in Solaris IP(7P) Module and STREAMS Framework May Lead to a Denial of Service (DoS) Condition