Security Updates | 2010-01-20

I track security updates for the following vendors: Apple, Cisco, FreeBSD, Microsoft, Red Hat, and Sun Microsystems. I chose these vendors based on my own needs for the networks and systems I manage. I’ve also found that updates from these vendors tend to catch the major updates necessary for common software applications. If you have other vendors you would like me to provide updates for, send me a message.

If you have an interest in information security from both a technical and managerial level, check out Principles of Information Security. It does an excellent job of presenting material for both audiences.

Apple Inc.

• Security Update 2010-001

 

Cisco Systems Inc.

• CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability
• Cisco IOS XR Software SSH Denial of Service Vulnerability

Red Hat, Inc.

• RHSA-2010:0041 Important: kernel-rt security and bug fix update
• RHSA-2010:0046 Important: kernel security and bug fix update
• RHSA-2010:0054 Moderate: openssl security update
• RHSA-2010:0060 Critical: acroread security update
• RHSA-2010:0061 Moderate: gzip security update
• RHSA-2010:0062 Moderate: bind security update

Sun Microsystems, Inc.

• Security Vulnerability in the Sun Java System Directory Server May Allow Crafted LDAP Search Requests To Cause A Denial Of Service (DoS) Condition