Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2009-09-12 InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Apple Updates

Published: 2009-09-12
Last Updated: 2009-09-12 19:50:15 UTC
by Jim Clausing (Version: 1)
0 comment(s)

Microsoft had their monthly patch day this past Tuesday.  Mozilla released new versions of Firefox.  Oracle and Adobe pushed theirs back a week, so look for them next week.  Cisco released their update to coincide with Microsoft's.  Well, not to be left out, Apple also released a number of updates this week.  Some of these look like they could be rather serious, so if you are using any of the affected software, you should probably update ASAP.

  • iPhone OS 3.1 and iPhone OS 3.1.1 for iPod Touch - covers CVE-2009-2206, CVE-2009-2794, CVE-2009-2207, CVE-2009-2795, CVE-2009-2815, CVE-2009-2796, CVE-2009-2797, CVE-2009-1725, CVE-2009-1724, and CVE-2009-2199
  • QuickTime 7.6.4 -  covers CVE-2009-2202, CVE-2009-2203, CVE-2009-2798, and CVE-2009-2799
  • Mac OS X v10.6.1 - which fixes the downgrade of the Adobe Flash player that occurred when upgrading to 10.6
  • Security Update 2009-005 - this update applies to the 10.4 and 10.5 branches of OS X (including PowerPC versions) and fixes issues with Alias Manager, CarbonCore, ClamAV, ColorSync, CoreGraphics, CUPS, Flash Player plug-in, ImageIO, Launch Services, MySQL, PHP, SMB, and the Wiki Server.

---------------
Jim Clausing, jclausing --at-- isc [dot] sans (dot) org

0 comment(s)

OSSEC version 2.2 available

Published: 2009-09-12
Last Updated: 2009-09-12 18:55:44 UTC
by Jim Clausing (Version: 1)
0 comment(s)

This past week version 2.2 of one of our favorite free HIDS products, OSSEC, was released.  If you run WordPress, the WordPress logging plugin alone is reason enough to give the new version a look. 

References:
http://www.ossec.net/main/ossec-v22-released
http://www.ossec.net/wpsyslog2
http://www.ossec.net/main/downloads

---------------
Jim Clausing, jclausing --at-- isc [dot] sans (dot) org

Keywords: OSSEC
0 comment(s)
Diary Archives