Glen Lumanau » security http://lumanau.web.id Nothing Special Fri, 30 Sep 2011 09:33:05 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 BIND DNSSEC incorrect checks for malformed signatures http://lumanau.web.id/2009/01/14/bind-dnssec-incorrect-checks-for-malformed-signatures.html http://lumanau.web.id/2009/01/14/bind-dnssec-incorrect-checks-for-malformed-signatures.html#comments Wed, 14 Jan 2009 09:30:03 +0000 Glen Lumanau http://www.lumanau.web.id/?p=140 The DSA_do_verify() function from OpenSSL is used to determine if a
DSA digital signature is valid.  When DNSSEC is used within BIND it
uses DSA_do_verify() to verify DSA signatures, but checks the function
return value incorrectly.

How to upgrade it?

FreeBSD 6.3, 6.4, 7.0, 7.1 systems

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch http://security.FreeBSD.org/patches/SA-09:04/bind.patch
# fetch http://security.FreeBSD.org/patches/SA-09:04/bind.patch.asc

b) Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch
# cd /usr/src/lib/bind
# make obj && make depend && make && make install
# cd /usr/src/usr.sbin/named
# make obj && make depend && make && make install
# /etc/rc.d/named restart

c) Install and use a fixed version of BIND from the FreeBSD Ports
Collection.

Debian / Ubuntu

Just do these steps

# apt-get update

# apt-get dist-upgrade


]]> http://lumanau.web.id/2009/01/14/bind-dnssec-incorrect-checks-for-malformed-signatures.html/feed 0 Microsoft security updates for January 2009 http://lumanau.web.id/2009/01/14/microsoft-security-updates-for-january-2009.html http://lumanau.web.id/2009/01/14/microsoft-security-updates-for-january-2009.html#comments Wed, 14 Jan 2009 07:38:44 +0000 Glen Lumanau http://www.lumanau.web.id/?p=137 Here is the new security update:

MS09-001 – addresses a vulnerability in Microsoft Windows (KB 958687)

How to get the updates

If you are using Windows Vista you can manage your updates through the control panel. For more information, see Windows Vista: How to update your operating system.

To manually download available updates, go to Microsoft Update or in Windows Vista go to your control panel. After your computer has been scanned to see which updates it needs, click the Custom button to find and choose the update you want to install. We recommend you install all High-Priority Security and Critical updates immediately.

We recommend that you get the updates delivered automatically to your PC. When your computer is on and connected to the Internet, the most current security updates are automatically downloaded and installed. To learn how to turn on automatic updating for your particular operating system, see Update your computer automatically.

]]> http://lumanau.web.id/2009/01/14/microsoft-security-updates-for-january-2009.html/feed 0