LANDesk^® Patch Manager and Security Suite ("LDSS") provide customers with the latest security and application patches and updates for the most utilized software in your business. Maintaining a safe and secure environment helps to avoid downtime that will affect employees and productivity. The following items are the patch and update highlights from this past week.

Windows Content

Vulnerability Definitions - This week was Microsoft's Patch Tuesday. Eleven security bulletins were released. The patches addressed several vulnerabilities in Microsoft's productivity applications, internet applications, and OS related issues. Additional third-party applications were also released from other vendors:

• Vulnerability ID: MS08-056, MS08-057, MS08-058, MS08-059, MS08-060, MS08-061, MS08-062, MS08-063, MS08-064, MS08-065, MS08-066

• LANDesk Patch News Bulletin: Microsoft Patch Tuesday Content for October 2008 is Available

• http://www.microsoft.com/technet/security/bulletin/ms08-oct.mspx

• Vulnerability ID: JREJDK_32bit_Manual, JREJDK_64bit_Manual, JDKDSTv139_Manual

• LANDesk Patch News Bulletin: Sun has Released Updates for JRE/JDK 1.6 and the JDK DST Timezone Tool 16-OCT-2008

• http://java.sun.com/javase/downloads/index.jsp

• http://java.sun.com/javase/tzupdater_README.html

• Vulnerability ID: FLASHPLAYERPLUGINv10

• LANDesk Patch News Bulletin: Adobe FlashPlayer v10.0.12.36 is Available 15-OCT-2008

• http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash

• Vulnerability ID: OPENOFFICEv330, OPENOFFICEv330_DEU

• LANDesk Patch News Bulletin: OpenOffice 3.0.0 is Available 14-OCT-2008

• http://development.openoffice.org/

• Vulnerability ID: SHOCKWAVEPLAYERv11.0.0.465

• LANDesk Patch News Bulletin: Shockwave Play Version 11.0.0.465 is Available 13-OCT-2008

• http://www.adobe.com/products/shockwaveplayer/

Mac Content

Vulnerability Definitions

• Vulnerability ID: APPLE-SA-2008-007-Ti11-Intel, Vulnerability ID - APPLE-SA-2008-007-Ti11-PPC, Vulnerability ID - APPLE-SA-2008-007-Ti11-UnivServer, APPLE-SA-2008-007-Ti11-PPCServer, APPLE-SA-2008-007-Le5-Server, APPLE-SA-2008-007-Le

• o LANDesk Patch News Bulletin: Apple Security Update 2008-007 is Available 10-OCT-2008

• o http://www.apple.com/support/downloads/index.html

• Vulnerability ID: ADIUM_MAC_132

• LANDesk Patch News Bulletin: Adium Version 1.3.2 for the Mac is Available 10-OCT-2008

• http://trac.adiumx.com/wiki/AdiumVersionHistory

• Vulnerability ID: APPLE-JAVA-For10.5Update2

• LANDesk Patch News Bulletin: Java for Mac OS X 10.5 Update 2 is Available 10-OCT-2008

• http://www.apple.com/support/downloads/javaformacosx105update2.html

• Vulnerability ID: APPLE-JavaRelease7-TI

• LANDesk Patch News Bulletin: Java for Mac OS X 10.4 Release 7 is Available 10-OCT-2008

• http://www.apple.com/support/[downloads|http://www.apple.com/support/downloads/javaformacosx104release7.html]/javaformacosx104release7.html

• Vulnerability ID: ENU_OFFICE-2008-1213, DEU_OFFICE-2008-1213, ESN_OFFICE-2008-1213, FRA_OFFICE-2008-1213, ITA_OFFICE-2008-1213, JPN_OFFICE-2008-1213, NLD_OFFICE-2008-1213, SVE_OFFICE-2008-1213, FIN_OFFICE-2008-1213, DAN_OFFICE-2008-1213, NOR_OFFICE-2008-1213

• LANDesk Patch News Bulletin: MS Patch Tuesday - Microsoft Office 2008 for Mac 12.1.3 Update - MS08-057

• http://support.microsoft.com/kb/958267

• Vulnerability ID: ENU_OFFICE-2004-1152, DEU_OFFICE-2004-1152, ESN_OFFICE-2004-1152, FRA_OFFICE-2004-1152, ITA_OFFICE-2004-1152, JPN_OFFICE-2004-1152, NLD_OFFICE-2004-1152, SVE_OFFICE-2004-1152

• LANDesk Patch News Bulletin: MS Patch Tuesday - Microsoft Office 2004 for Mac 11.5.2 Update - MS08-057

• http://support.microsoft.com/kb/958312

Linux Content

Vulnerability Definitions

• Vulnerability ID: SUSE Linux Enterprise Server Vulnerabilities - See the LANDesk Security Bulletin for the details

• LANDesk Patch News Bulletin: Vulnerability Definitions for SUSE Enterprise Server 10, SP1 and SP2 are Available 17-OCT-2008

• Novell Patch Support

Spyware Updates

Definitions

• LRD Version 338

• LANDesk Patch News Bulletin: Spyware LRD 338 is available on 13-Oct-2008

• Community.LANDesk.com

• Core.aawdef Version 126

• LANDesk Patch News Bulletin: Core.Aawdef 126 is Available on 13-Oct-2008

• Community.LANDesk.com

Antivirus Updates

Definitions

• Sometimes a virus shows up that does not have a definition yet. This is true for all viruses when they are first written. These are called "zero day" viruses. The following link provides instructions on how these samples can be sent to LANDesk for inclusion in our Antivirus pattern files.

• How to send LANDesk an infected or suspicious file

• Community.LANDesk.com

• Virus Watch from our partner Kaspersky Lab

• Virus Watch

LANDesk^® Tips

A few months ago Information Week conducted a review of some of the major patch manager products. See how LANDesk fared.

• LANDesk's Patch Manager is, ... part of a comprehensive endpoint management package...Patch Manager was the only one with an automated process to facilitate ITIL change management practices--a huge plus. Its Parallel Patch Process defines testing and rollout processes that can be clearly documented and transparent to a change management board, as well as enabling highly efficient deployment of patches. These plus an automated process for copying patches to an entire subnet through one client and an option to auto-fix vulnerabilities helped LANDesk capture our Editor's Choice.

• Rolling Review Wrap-Up: Patch Management

• InformationWeek

Security News

Patching and Social Engineering Attacks

• After reading this week's featured article I was reminded why it is important to regularly remind end-users of the corporate patching policy. It is also a good idea to educate your end-users about potential social engineering attacks, use this week's article to get an idea of where to start.** **

• The Spread of Bogus Security Software

• eWeek.com

Where to Send Feedback

At LANDesk, we are constantly striving to improve our products and services and hope you find these changes reflective of our ongoing commitment to listen to you-our partners and customers-in providing the best possible solutions to meet your needs now and in the future. Please continue to provide feedback by contacting our local support organization.

Best regards,

LANDesk Product Support

Copyright © 2008 LANDesk Software. All rights reserved. LANDesk is either a registered trademark or trademark of LANDesk Software, Ltd. or its affiliated entities in the United States and/or other countries. Other names or brands may be claimed as the property of others.

Information in this document is provided for information purposes only. The information presented here is subject to change without notice. This information is not warranted to be error-free, nor subject to any other warranties or conditions, whether expressed orally or implied in law, including any implied warranties and conditions of merchantability or fitness for a particular purpose. LANDesk disclaims any liability with respect to this document and LANDesk has no responsibility or liability for any third party products of any content contained on any site referenced herein. This document may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission. For the most current product information, please visit [http://www.landesk.com/].