Weekly Security Review Jun1-5 - Community - LANDesk

LANDesk
®

Secu
rity Review for the Week Ending

Jun

5
,

200
9

LANDesk
®

Patch Manager and Security
Suite (“LD
S
S”)
provide customers with the latest security and
application patches and updates for the most utilized software in your business
. Maintaining a safe and secure
environment helps to avoid downtime that will affect employees and productivity. The following items are the
patch and update highlights from this past week.

Windows Content

Vulnerability Definitions

–





Vulnerability I
D
:

95
7924

o

LANDesk Patch News Bulletin: Cumulative Update Rollup for Visual Basic
6.0 Service Pack 6 REF is Available 01
-
JUN
-
2009

o


http://support.microsoft.com/kb/957924




Vulnerability I
D
:

963707

o

LANDesk Patch News Bulletin:
U
pdate to .NET Framework 3.5 SP1 for the
.NET Framework Assistant 1.0 for Firefox is Available 0
5
-
J
UN
-
2009

o

http://support.microsoft.com/kb/963707




Vulnerability I
D
:

SKYPEv4.0.0.227

o

LANDesk Patch News Bulletin: Updated Version of Skype is Available 04
-
JUN
-
2009

o


https://developer.skype.com/WindowsSkype/ReleaseNotes




Vulnerability ID:
QTIMEv7.6.2
,

IT
UNESv8.2

o

LANDesk Patch News Bulletin: Quicktime and i
Tunes Updates are Available
02
-
JUN
-
2009


o

http://support.apple.com/kb/HT3027

o

http://support.apple.com/kb/HT3592





Vulnerability I
D
:

JREJDK_32bit_Manual_20090531
,

JREJDK_
64
t_Manual_20090531
,

YAHOO_MSGR9v9.0.0.2162

o

LANDesk Patch News B
ulletin: JRE/JDK and Yahoo!Messenger Updates
are Available 31
-
MAY
-
2009

o


http://java.sun.com/javase/downloads/index.jsp


o

http://messenger.yahoo.com/




Mac Content

Vulnerability Definitions



Vulnerability ID:

APPLE
-
iTunes82

o

LANDesk Patch News Bulletin: iTunes Update for Mac is Avail
able 02
-
JUN
-
2009

o

http://support.apple.com/downloads/iTunes_8_2_for_Mac




Vulnerability ID:
APPLE
-
QUICKTIME762Ti
, APPLE
-
QUICKTIME762Le

o

LANDesk Patch News Bulletin: Quicktime Update for Mac is Available 02
-
JUN
-
2009

o

http://support.apple.com/downloads/QuickTime_7_6_2_for_Mac


Linux Content

Vulnerabilit
y Definitions

HPUX:
21

vulnerabilities;

V_INTL_PHSS_38526 (Changed)

V_INTL_PHSS_38527 (Changed)

V_INTL_PHSS_38513

V_INTL_UPDATE_02429_001

V_INTL_UPDATE_02429_002

V_INTL_UPDATE_02429_003

V_INTL_UPDATE_02429_004

V_INTL_UPDATE_02429_005

V_INTL_UPDATE_02429_006

V_INTL_UPDATE_02429_007

V_IN
TL_UPDATE_02429_008

V_INTL_UPDATE_02429_009

V_INTL_UPDATE_02429_010

V_INTL_UPDATE_02429_011

V_INTL_UPDATE_02429_012

V_INTL_UPDATE_02429_013

V_INTL_UPDATE_02429_014

V_INTL_UPDATE_02429_015

V_INTL_UPDATE_02429_016

V_INTL_UPDATE_02429_017

V_INTL_UPD
ATE_02429_018



Redhat: 2

vulnerabilities;

V_INTL_RHSA
-
2009
-
1066

V_INTL_RHSA
-
2009
-
1075



Solaris: 2 vulnerabilities;

V_INTL_119465 (Changed)

V_I
NTL_119466 (Changed)



SLES: 1
92

vulnerabilities;

V_INTL_dbgp2
-
openssl
-
6267 (New)

V_INTL_dbgp2
-
portmap
-
6180 (New)

V_INTL_dbgp2
-
srptools
-
6167 (New)

V_INTL_patch
-
12419 (New)

V_INTL_patch
-
12424 (New)

V_INTL_sledp2
-
acroread_ja
-
6264 (New)

V_INTL_sled
p2
-
cyrus
-
sasl
-
6250 (New)

V_INTL_sledp2
-
ethereal
-
6269 (New)

V_INTL_sledp2
-
net
-
snmp
-
6248 (New)

V_INTL_sledp2
-
openssl
-
6267 (New)

V_INTL_sledp2
-
portmap
-
6180 (New)

V_INTL_sledp2
-
RealPlayer
-
6266 (New)

V_INTL_slesp2
-
cyrus
-
sasl
-
6250 (New)

V_INTL_slesp2
-
ethe
real
-
6269 (New)

V_INTL_slesp2
-
net
-
snmp
-
6248 (New)

V_INTL_slesp2
-
openssl
-
6267 (New)

V_INTL_slesp2
-
portmap
-
6180 (New)

V_INTL_slesp2
-
sapinit
-
6141 (New)

V_INTL_slesp2
-
srptools
-
6167 (New)

V_INTL_dbgp2
-
aaa_base
-
6014

V_INTL_dbgp2
-
amarok
-
5931

V_INTL_dbgp2
-
apache2
-
6035

V_INTL_dbgp2
-
apache2
-
mod_
php5
-
5909

V_INTL_dbgp2
-
audit
-
5797

V_INTL_dbgp2
-
bind
-
5905

V_INTL_dbgp2
-
crash
-
6131

V_INTL_dbgp2
-
cron
-
6176

V_INTL_dbgp2
-
dbus
-
1
-
5969

V_INTL_dbgp2
-
ghostscript
-
fonts
-
other
-
6066

V_INTL_dbgp2
-
ghostscript
-
fonts
-
other
-
6245

V_INTL_dbgp2
-
glibc
-
6134

V_INTL_dbg
p2
-
grub
-
6200

V_INTL_dbgp2
-
gtk2
-
6057

V_INTL_dbgp2
-
hal
-
6036

V_INTL_dbgp2
-
libvirt
-
5869

V_INTL_dbgp2
-
limal
-
ca
-
mgm
-
5764

V_INTL_dbgp2
-
lvm2
-
5748

V_INTL_dbgp2
-
MozillaFirefox
-
5890

V_INTL_dbgp2
-
multipath
-
tools
-
6083

V_INTL_dbgp2
-
NetworkManager
-
5801

V_INTL_db
gp2
-
NetworkManager
-
6027

V_INTL_dbgp2
-
nfs
-
utils
-
5713

V_INTL_dbgp2
-
novell
-
ipsec
-
tools
-
5888

V_INTL_dbgp2
-
ofed
-
5897

V_INTL_dbgp2
-
OpenOffice_org
-
5971

V_INTL_dbgp2
-
openssl
-
5949

V_INTL_dbgp2
-
openssl
-
6179

V_INTL_dbgp2
-
scsi
-
5970

V_INTL_dbgp2
-
udev
-
6153

V_IN
TL_dbgp2
-
udev
-
6203

V_INTL_dbgp2
-
util
-
linux
-
5912

V_INTL_dbgp2
-
xen
-
6226

V_INTL_dbgp2
-
xen
-
boot.clock
-
6135

V_INTL_patch
-
12316

V_INTL_patch
-
12317

V_INTL_patch
-
12319

V_INTL_patch
-
12326

V_INTL_patch
-
12327

V_INTL_patch
-
12328

V_INTL_patch
-
12339

V_INTL_pa
tch
-
12341

V_INTL_patch
-
12342

V_INTL_patch
-
12343

V_INTL_patch
-
12344

V_INTL_patch
-
12350

V_INTL_patch
-
12352

V_INTL_patch
-
12353

V_INTL_patch
-
12356

V_INTL_patch
-
12359

V_INTL_patch
-
12361

V_INTL_patch
-
12384

V_INTL_patch
-
12397

V_INTL_patch
-
12398

V_INT
L_patch
-
12403

V_INTL_patch
-
12411

V_INTL_patch
-
12415

V_INTL_patch
-
12417

V_INTL_RU
-
for
-
iPrint(010101)

V_INTL_sdkp1
-
OpenOffice_org
-
5166

V_INTL_sledp1
-
java
-
1_4_2
-
sun
-
5772

V_INTL_sledp1
-
net
-
snmp
-
5807

V_INTL_sledp1
-
sled
-
release
-
5929

V_INTL_sledp2
-
acrore
ad_ja
-
6161

V_INTL_sledp2
-
acroread
-
6121

V_INTL_sledp2
-
apparmor
-
utils
-
6013

V_INTL_sledp2
-
audit
-
5797

V_INTL_sledp2
-
avahi
-
5870

V_INTL_sledp2
-
cifs
-
mount
-
5906

V_INTL_sledp2
-
clamav
-
6188

V_INTL_sledp2
-
compat
-
openssl097g
-
5957

V_INTL_sledp2
-
cron
-
6176

V_INTL
_sledp2
-
dbus
-
1
-
5969

V_INTL_sledp2
-
dhcp
-
5975

V_INTL_sledp2
-
eel
-
6047

V_INTL_sledp2
-
eID
-
belgium
-
6006

V_INTL_sledp2
-
evolution
-
data
-
server
-
6166

V_INTL_sledp2
-
fonts
-
arabic
-
5922

V_INTL_sledp2
-
freetype2
-
6181

V_INTL_sledp2
-
ghostscript
-
fonts
-
other
-
6066

V_INT
L_sledp2
-
ghostscript
-
fonts
-
other
-
6245

V_INTL_sledp2
-
gnome
-
screensaver
-
6097

V_INTL_sledp2
-
gnutls
-
6073

V_INTL_sledp2
-
gpg2
-
6107

V_INTL_sledp2
-
gtk2
-
6057

V_INTL_sledp2
-
gvim
-
6025

V_INTL_sledp2
-
hal
-
6036

V_INTL_sledp2
-
imlib2
-
5832

V_INTL_sledp2
-
java
-
1_5_0
-
i
bm
-
5960

V_INTL_sledp2
-
kdelibs3
-
6062

V_INTL_sledp2
-
kdepim3
-
6160

V_INTL_sledp2
-
kdump
-
5830

V_INTL_sledp2
-
krb5
-
5788

V_INTL_sledp2
-
krb5
-
6140

V_INTL_sledp2
-
liblcms
-
6048

V_INTL_sledp2
-
libmikmod
-
6034

V_INTL_sledp2
-
libsndfile
-
6040

V_INTL_sledp2
-
libxml2
-
598
2

V_INTL_sledp2
-
logrotate
-
6002

V_INTL_sledp2
-
mkinitrd
-
6061

V_INTL_sledp2
-
MozillaFirefox
-
6187

V_INTL_sledp2
-
netatalk
-
5983

V_INTL_sledp2
-
net
-
snmp
-
5807

V_INTL_sledp2
-
NetworkManager
-
kde
-
6026

V_INTL_sledp2
-
nfs
-
utils
-
5713

V_INTL_sledp2
-
openmotif
-
6190

V_
INTL_sledp2
-
openslp
-
5980

V_INTL_sledp2
-
openvpn
-
5776

V_INTL_sledp2
-
python
-
5837

V_INTL_sledp2
-
scsi
-
5970

V_INTL_sledp2
-
sysconfig
-
6095

V_INTL_sledp2
-
tcsh
-
5847

V_INTL_sledp2
-
udev
-
6203

V_INTL_sledp2
-
valgrind
-
5803

V_INTL_sledp2
-
xen
-
6226

V_INTL_sledp2
-
xin
e
-
devel
-
5965

V_INTL_sledp2
-
xntp
-
6072

V_INTL_sledp2
-
xntp
-
6232

V_INTL_sledp2
-
xterm
-
5898

V_INTL_slesp1
-
libxml2
-
5802

V_INTL_slesp1
-
perl
-
Bootloader
-
5222

V_INTL_slesp2
-
apache2
-
mod_php5
-
6069

V_INTL_slesp2
-
apparmor
-
utils
-
6013

V_INTL_slesp2
-
audiofile
-
5948

V_INTL_slesp2
-
bind
-
5905

V_INTL_slesp2
-
cifs
-
mount
-
5906

V_INTL_slesp2
-
compat
-
openssl097g
-
6170

V_INTL_slesp2
-
cron
-
6176

V_INTL_slesp2
-
cups
-
6174

V_INTL_slesp2
-
dbus
-
1
-
5969

V_INTL_slesp2
-
dhcp6
-
5973

V_INTL_slesp2
-
evms
-
5913

V_INTL_slesp2
-
freetype2
-
6181

V_I
NTL_slesp2
-
ghostscript
-
fonts
-
other
-
6066

V_INTL_slesp2
-
ghostscript
-
fonts
-
other
-
6245

V_INTL_slesp2
-
grub
-
6200

V_INTL_slesp2
-
gtk
-
vnc
-
6059

V_INTL_slesp2
-
gvim
-
6025

V_INTL_slesp2
-
heartbeat
-
5857

V_INTL_slesp2
-
java
-
1_5_0
-
ibm
-
6253

V_INTL_slesp2
-
kdelibs3
-
6062

V_INTL_slesp2
-
kdepim3
-
6160

V_INTL_slesp2
-
kdump
-
5830

V_INTL_slesp2
-
krb5
-
5788

V_INTL_slesp2
-
libmikmod
-
6034

V_INTL_slesp2
-
libpng
-
5945

V_INTL_slesp2
-
libpng
-
6003

V_INTL_slesp2
-
libpng
-
6024

V_INTL_slesp2
-
libsoup
-
6223

V_INTL_slesp2
-
limal
-
ca
-
mgm
-
5764

V_IN
TL_slesp2
-
lvm2
-
5748

V_INTL_slesp2
-
mkinitrd
-
6061

V_INTL_slesp2
-
multipath
-
tools
-
6083

V_INTL_slesp2
-
NetworkManager
-
6027

V_INTL_slesp2
-
NetworkManager
-
gnome
-
6028

V_INTL_slesp2
-
opensc
-
5910

V_INTL_slesp2
-
openslp
-
5980

V_INTL_slesp2
-
openssl
-
5949

V_INTL_sles
p2
-
openssl
-
6179

V_INTL_slesp2
-
openswan
-
6117

V_INTL_slesp2
-
pam_krb5
-
6010

V_INTL_slesp2
-
pam_mount
-
5911

V_INTL_slesp2
-
postgresql
-
6114

V_INTL_slesp2
-
postgresql
-
pl
-
6208

V_INTL_slesp2
-
python
-
5837

V_INTL_slesp2
-
scsi
-
5970

V_INTL_slesp2
-
strongswan
-
6116

V_I
NTL_slesp2
-
sysconfig
-
6095

V_INTL_slesp2
-
util
-
linux
-
5912

V_INTL_slesp2
-
websphere
-
as_ce
-
5850

V_INTL_slesp2
-
xen
-
6226

V_INTL_slesp2
-
xntp
-
6072

V_INTL_slesp2
-
yast2
-
mail
-
server
-
5979

Spyware Updates

Definitions



Core.aawdef Version

Core.
148
.
0032
.aawdef
-

Cor
e.
148
.
0035
.aawdef
-

Incremental
Update

o

LANDesk Patch News Bulletin: Updated Spyware Definition F
iles are
Available Core 148
.00
32

–

Core.148.00
35

03
-
Jun
-
2009

o

Community.LANDesk.com


Where to Send Feedback

At LANDesk, we are constantly striving to improve our products and services and hope
you find these changes reflective of our ongoing commitment to listen to you
-
our partners
and customers
-
in providing the best possible solutions to meet your needs now and in the
future. Please continue to provide feedback by contacting our local support organization.

Best regards,

LANDesk Product Support

Copyright © 200
9

LANDesk Software. All

rights reserved. LANDesk is either a registered
trademark or trademark of LANDesk Software, Ltd. or its affiliated entities in the United
States and/or other countries. Other names or brands may be claimed as the property of
others.

Information in this do
cument is provided for information purposes only. The information
presented here is subject to change without notice. This information is not warranted to be
error
-
free, nor subject to any other warranties or conditions, whether expressed orally or
implied

in law, including any implied warranties and conditions of merchantability or
fitness for a particular purpose. LANDesk disclaims any liability with respect to this
document and LANDesk has no responsibility or liability for any third party products of
an
y content contained on any site referenced herein. This document may not be reproduced
or transmitted in any form or by any means, electronic or mechanical, for any purpose,
without our prior written permission. For the most current product information, pl
ease visit
http://www.landesk.com
.