ESA 8.5.6-092 Update and CVE-2011-1521 vulnerability ?

I can't find much info on this update my appliances have reported is available to upgrade to and I was wondering if anyone else has installed the 8.5.6-092 update onto a C370 ESA Appliance yet or are we all covered OK as the documentation leads to believe we are covered in 8.5.6-074 release..?

CVE-2011-1521 was listed as corrected as of 8.5.6-073:
https://tools.cisco.com/bugsearch/bug/CSCul87605
This is in the release notes made the release notes for the 8.5.6 HP1 (-092):
http://www.cisco.com/c/dam/en/us/td/docs/security/esa/esa8-5-6/ESA_8-5-6_HP1_Release_Notes.pdf
-Robert

Similar Messages

HT200100 I ran this update and now 2011 outlook for Mac will not load, it indicates its not compatible with this operating system, can anyone shed some light on this?

I ran the update for 10.7.4 and now my 2011 outlook will not load, I've reloaded the application and it still won't load, any help is so appreciated!

Run all available Office 2011 software updates using Microsoft Auto Update program.

Deploying Java Software Updates and SCUP 2011

Hello again All,
I've created a Java software update (JRE 7u71 (x86)) using SCUP 2011, and followed Kent Agerlund's "The_Complete_SCUP_2011_installation_and_configuration_guide" (great doc by the way). I've made sure to include all of the switches and
installable/installed rules as recommended.
Now the problem, once I advertise the update via SCCM, and begin installing, if a browser is open and Java is in use, then it will hang for a while and eventually just fail. However, when I run the java executable locally (jre-7u71-windows-i586.exe),
with the same switch (/s "IEXPLORER=1 MOZILLA=1" /quiet), the system will actually reboot and then install once booted back up; which is desirable.
Has anybody experienced this issue, and if so how do I remediate?
For 32 bit systems, I also get the following prompt;
Note: I'm not sure why the full switch is required, as I can only find reference that the JRE executable supports the "/s".
I can provide logs as well, if requested.
Thanks,
Bill

Java Install logs - From start until pop-up
=== Logging started: 11/12/2014 13:32:20 ===
Action start 13:32:20: INSTALL.
Action start 13:32:20: AppSearch.
Action ended 13:32:20: AppSearch. Return value 1.
Action start 13:32:20: LaunchConditions.
Action ended 13:32:20: LaunchConditions. Return value 1.
Action start 13:32:20: FindRelatedProducts.
Action ended 13:32:20: FindRelatedProducts. Return value 1.
Action start 13:32:20: ValidateProductID.
Action ended 13:32:20: ValidateProductID. Return value 1.
Action start 13:32:20: setUserProfileNT.
Action ended 13:32:20: setUserProfileNT. Return value 1.
Action start 13:32:20: setAllUsersProfile2K.
Action ended 13:32:20: setAllUsersProfile2K. Return value 1.
Action start 13:32:20: CostInitialize.
Action ended 13:32:20: CostInitialize. Return value 1.
Action start 13:32:20: FileCost.
Action ended 13:32:20: FileCost. Return value 1.
Action start 13:32:20: IsolateComponents.
Action ended 13:32:20: IsolateComponents. Return value 1.
Action start 13:32:20: CostFinalize.
Action ended 13:32:20: CostFinalize. Return value 1.
Action start 13:32:20: SetARPReadme.
Action ended 13:32:20: SetARPReadme. Return value 1.
Action start 13:32:20: CheckPendingFileRenameOperations.
Action ended 13:32:20: CheckPendingFileRenameOperations. Return value 1.
Action start 13:32:20: SetODBCFolders.
Action ended 13:32:20: SetODBCFolders. Return value 1.
Action start 13:32:20: MigrateFeatureStates.
Action ended 13:32:20: MigrateFeatureStates. Return value 0.
Action start 13:32:20: SetARPINSTALLLOCATION.
Action ended 13:32:20: SetARPINSTALLLOCATION. Return value 1.
Action start 13:32:20: InstallValidate.
Info 1603.The file C:\Program Files\Java\jre7\bin\java.exe is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\awt.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\dcpr.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\deploy.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\deploy.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\fontmanager.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\java.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\java.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2iexp.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2launcher.exe is being held in use by the following process: Name: jp2launcher, ID: 6876, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2native.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2native.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2ssv.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\management.dll is being held in use by the following process: Name: FrameworkService, ID: 1716, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\management.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\net.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\net.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\nio.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\nio.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\ssv.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\sunec.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\sunmscapi.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\t2k.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\verify.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\verify.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\zip.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\zip.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\client\jvm.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\client\jvm.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Action ended 13:32:23: InstallValidate. Return value 1.
Action start 13:32:23: RemoveExistingProducts.
Action start 13:32:23: INSTALL.
Action start 13:32:23: AppSearch.
Action ended 13:32:23: AppSearch. Return value 1.
Action start 13:32:23: LaunchConditions.
Action ended 13:32:23: LaunchConditions. Return value 1.
Action start 13:32:23: FindRelatedProducts.
Action ended 13:32:23: FindRelatedProducts. Return value 0.
Action start 13:32:23: ValidateProductID.
Action ended 13:32:23: ValidateProductID. Return value 1.
Action start 13:32:23: setUserProfileNT.
Action ended 13:32:23: setUserProfileNT. Return value 1.
Action start 13:32:23: setAllUsersProfile2K.
Action ended 13:32:23: setAllUsersProfile2K. Return value 1.
Action start 13:32:23: CostInitialize.
Action ended 13:32:23: CostInitialize. Return value 1.
Action start 13:32:23: FileCost.
Action ended 13:32:23: FileCost. Return value 1.
Action start 13:32:23: IsolateComponents.
Action ended 13:32:23: IsolateComponents. Return value 1.
Action start 13:32:23: CostFinalize.
Action ended 13:32:23: CostFinalize. Return value 1.
Action start 13:32:23: SetARPReadme.
Action ended 13:32:23: SetARPReadme. Return value 1.
Action start 13:32:23: SetODBCFolders.
Action ended 13:32:23: SetODBCFolders. Return value 1.
Action start 13:32:23: MigrateFeatureStates.
Action ended 13:32:23: MigrateFeatureStates. Return value 0.
Action start 13:32:23: InstallValidate.
Info 1603.The file C:\Program Files\Java\jre7\bin\java.exe is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\awt.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\dcpr.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\deploy.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\deploy.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\fontmanager.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\java.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\java.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2iexp.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2launcher.exe is being held in use by the following process: Name: jp2launcher, ID: 6876, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2native.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2native.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\jp2ssv.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\management.dll is being held in use by the following process: Name: FrameworkService, ID: 1716, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\management.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\net.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\net.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\nio.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\nio.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\ssv.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\sunec.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\sunmscapi.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\t2k.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\verify.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\verify.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\zip.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\zip.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\client\jvm.dll is being held in use by the following process: Name: iexplore, ID: 6644, Window Title: (not determined yet). Close that application and retry.
Info 1603.The file C:\Program Files\Java\jre7\bin\client\jvm.dll is being held in use by the following process: Name: java, ID: 7448, Window Title: (not determined yet). Close that application and retry.
Action ended 13:32:26: InstallValidate. Return value 1.
Action start 13:32:26: InstallInitialize.
Action ended 13:32:26: InstallInitialize. Return value 1.
Action start 13:32:26: UninstallJQS.
Action ended 13:32:32: UninstallJQS. Return value 1.

Virtual ESA appliance update and upgrade using static method

What are the static servers for updates and upgrading if you are using a virtual appliance ?
I know that the if you use a standard appliance they are:
downloads-static.ironport.com: 208.90.58.105 on port 80
update-manifests.ironport.com: 208.90.58.5 on port 443
updates-static.ironport.com: 208.90.58.25 on port 80
But I see that my virtual appliance is trying to go to "update-manifests.sco.cisco.com" - are there other differences for the virtual appliance ?

Yes, I can confirm through my own experiences over the past week that the Virtual Appliances do not use the same update servers.
Virtual Appliances point to dynamichost update-manifests.sco.cisco.com - 208.90.58.6. I'm not sure about the static update IPs, as the static sub domains do not seem to exist on the sco.cisco.com and it looks like Cisco is using Akamai CDN to distribute updates over port 80. You may need to allow iyour Virtual ESAs out on port 80 any, and 443 seems to be a single host.
Also I found the following article most helpful for Virtual ESA Updates:
http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118065-maintainandoperate-esa-00.html

Has anyone upgraded the Ironport ESA to 8.5.6-074 and had the issues of Raid status showing unknown?

Has anyone upgraded the Ironport ESA to 8.5.6-074 and had the issues of Raid status showing unknown? After we upgraded our appliances we are having issues with our ESA appliances showing the RAID status as unknown. When we reported the issue to CISCO we were updated there were no issues reported at all. Could anyone please confirm if you have experienced the same issue.

You should see OPTIMAL - meaning the drives in the C170 are in good health/status:
myc680.local> version
Current Version
===============
UDI: C680 V FCH1611V0B2
Name: C680
Product: Cisco IronPort C680 Messaging Gateway(tm) Appliance
Model: C680
Version: 8.5.6-074
Build Date: 2014-07-21
Install Date: 2014-07-29 11:16:34
Serial #: xxx-yyy1611Vzzz
BIOS: C240M3.1.4.5.2.STBU
RAID: 3.220.75-2196, 5.38.00_4.12.05.00_0x05180000
RAID Status: Optimal
RAID Type: 10
BMC: 1.05
There are times post-reboot, that you'll see and get notification of RAID sub-optimal --- meaning that the appliance is running through on a health-check of the appliance's RAID. You should be getting a notification once RAID status has returned to OPTIMAL, or as per the older OS revisions, READY:
myc170.local> version
Current Version
===============
UDI: C170 V01 FCH1428V06A
Name: C170
Description: Cisco IronPort C170
Product: Cisco IronPort C170 Messaging Gateway(tm) Appliance
Model: C170
Version: 7.6.3-019
Build Date: 2013-06-09
Install Date: 2014-09-12 13:52:24
Serial #: xxxxxxD87B39-yyyyyy8V06A
BIOS: 9B1C115A
RAID: 02
RAID Status: READY
RAID Type: 1
BMC: 2.01

OS 10.6.5 updater and flash player

knowing that 10.6.5 updater brings flash player up to the latest available, I uninstalled the version of flash player I had installed (knowing Adobe recommends that you uninstall the old one before installing a newer version). So, I uninstalled it using hte provided adobe flash player uninstaller. I then ran the 10.6.5 updater and was surprised to find that it did not install flash player.
Can I assume that, in this the case, the 10.6.5 updater will not install (or update) flash player if it does not find it already there?

I am confusted, the notes in the 10.6.5 says it updates your flash player to the latest one...
Flash Player plug-in
http://support.apple.com/kb/HT4435
CVE-ID: CVE-2008-4546, CVE-2009-3793, CVE-2010-0209, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161, CVE-2010-2162, CVE-2010-2163, CVE-2010-2164, CVE-2010-2165, CVE-2010-2166, CVE-2010-2167, CVE-2010-2169, CVE-2010-2170, CVE-2010-2171, CVE-2010-2172, CVE-2010-2173, CVE-2010-2174, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2179, CVE-2010-2180, CVE-2010-2181, CVE-2010-2182, CVE-2010-2183, CVE-2010-2184, CVE-2010-2185, CVE-2010-2186, CVE-2010-2187, CVE-2010-2189, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE-2010-2215, CVE-2010-2216, CVE-2010-2884, CVE-2010-3636, CVE-2010-3638, CVE-2010-3639, CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, CVE-2010-3652, CVE-2010-3654, CVE-2010-3976
Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 through v10.6.4, Mac OS X Server v10.6 through v10.6.4
Impact: Multiple vulnerabilities in Adobe Flash Player plug-in
Description: Multiple issues exist in the Adobe Flash Player plug-in, the most serious of which may lead to arbitrary code execution. The issues are addressed by updating the Flash Player plug-in to version 10.1.102.64. Further information is available via the Adobe web site at http://www.adobe.com/support/security/
Message was edited by: powerbook1701
Message was edited by: powerbook1701

Mapping of CAN and CVE to Oracle CPU

There is a page on OTN that maps public security vulnerability findings (CANs and CVEs) to Oracle CPUs. The page states that it includes all CPUs up to January 2008. However, it appears the table has not been updated since January 2007.
Here is a link to the page:
http://www.oracle.com/technology/deploy/security/critical-patch-updates/public_vuln_to_advisory_mapping.html

There have been no vulnerability fixes released against open source products via Critical Patch Updates for over one year. The table is up to date. There have been many Critical Patch Update fixes for proprietary software, of course, but we do not reference CVE entries in this or any other documentation for proprietary software vulnerabilities.
Bruce

Security update and demo licence

Is it possible de make security update on virtual ironport with valid demo licence ?
Thanks for your attention
Cisco C100V
Description
Status
Time Remaining
Expiration Date
Outbreak Filters
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
IronPort Anti-Spam
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
Sophos Anti-Virus
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
Incoming Mail Handling
Active
39 days
27 Aug 2014 15:42 (GMT +02:00)
IronPort Email Encryption
Dormant
39 days
27 Aug 2014 01:59 (GMT +02:00)
RSA Email Data Loss Prevention
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
Bounce Verification
Dormant
39 days
27 Aug 2014 01:59 (GMT +02:00)

(*I edit your serial from your original post --- please do not post serial number for security reasons!) :-)
Did you request the license for demo from the License Administration Portal:
https://tools.cisco.com/SWIFT/LicensingUI/Quickstart
Click "Get Other Licenses" > "Demo and Evaluation" > "Security Products" > "Cisco Virtual Appliance Demo License" > "Cisco Email Security Appliance (ESA) Virtual Appliance 45 Day Demo License"
Fill out the needed information once presented for the target devices and options, and submit.
If this was a recent request within the past week, you will need to re-request, as there was an incorrectly stamped certificate within the license XML provided that does not allow the virtual appliances to reach out and validate against the provisioning correctly. This WILL prevent you from getting updates and activating test feature keys.
I hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

WRT54G and CVE-2008-1447 (DNS cache poisoning vulnerability)

Is the WRTG54 affected by the DNS cache poisoning vulnerability described in CVE-2008-1447 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447)?
If so, can we expect a patch, and when? Are there any steps we can do to protect ourselves from attack in the meanwhile?
Many thanks,
RogerB

No, I have an acceptable external DNS provider.
Both my XP and Debian PCs required software updates for CVE-2008-1447 according to the Microsoft and Debian websites. This suggests that the router may need similar attention, particularly as it resolves hostnames to IP addresses for me on my home network. For all I know, it may even be based on Debian (I know that routers include GPL software which requires Linksys to publish several megabytes of GPL code).
To rephrase my question, does the firmware on the WRT54G include programs such as BIND9, which are affected by CVE-2008-1447? If so, when can we expect an update for the firmware which includes fixes for any such programs?
As a follow on question, if the firmware does require updating, are there any settings that I can change, or actions that I can avoid, to ensure my home network remains safe from a DNS cache poisoning attack in the meantime?
Many thanks,
RogerB

CVE-2014-6271 and CVE-2014-7169 / Oracle Linux

Hi ,
patches required to resolve the vulnerabilities described in CVE-2014-6271 and CVE-2014-7169 in Oracle linux 5 (x86) is "bash-3.2-33.el5_11.4.x86_64.rpm "
from where i can get this patch, its not availible on support.oracle/patches !!
Thanks,
Thamer

Your Oracle Linux system should be configured to automatically install packages either from the Unbreakable Linux Network or public-yum.oracle.com. You might want to ask your Linux sysadmin for assistance if your servers aren't already configured for updates.
You can also check Chapter 1 and Chapter 2 of the Oracle Linux Administrator's Guide for more details on using ULN or public-yum: Oracle® Linux (it's for OL6 but the concepts are the same for OL5).

I am trying to update Adobe Bridge and Photoshop CS6, because it is not opening my CR2 files taken by my Canon 6D. I have tried to go to help updates, and the software says that it is "Up to Date". However, if I view the plug-in, it says that Camera R

I am trying to update Adobe Bridge and Photoshop CS6, because it is not opening my CR2 files taken by my Canon 6D. I have tried to go to help > updates, and the software says that it is "Up to Date". However, if I view the plug-in, it says that Camera Raw is only version 7.1. I can not find a direct download for Camera Raw 7.3, only the DNG converter, NOT CAMERA RAW! Please Help!

Did you fix your issue? I am having the same one

HT5381 i did a software update and now mail wont open at all

Help......my mail app is coming up with an error "You can't use this version of Mail with this version of Mac OS X". Can I uninstall the update?

!! WARNING !!
about the September 2012
"Security Update 2012-004"
If you've got "Mail.app" in a folder OTHER THAN the root "Applications" folder,
MOVE "MAIL.APP" TO THE APPLICATIONS FOLDER
**BEFORE** INSTALLING THE "004" UPDATE!!
Because *IF* you use OSX's integrated Software Update app from the Apple menu to do the "004" updating, and *IF* your Mail.app is NOT in the Applications folder, then buddy, you've got some sitdown fixit time ahead of ya and/or some internet tie-up time downloading the "004" update file itself.
Been through it all, already. In fact, just got done getting my Mail back up & running. And I tried everything short of attempting to unpacking my "Mail.pkg" receipt file using... whatever... even Pacifist couldn't get it out. So that fixit "Plan D" died quick. And I'm not savvy enough to use Terminal commands to do "Plan E," so that SUDO stuff was my brick wall.
So I compressed my entire "Mail" subdirectory that contain all my emails, for safekeeping during the required surgery, or whatever would work, leaving the original Mail directory where it was. In case something bad happened in all my fixit whatevers, the one thing I *didn't* want to cross paths with was a hosed Library -> Mail folder. Then I'd be pssd. But I can wipe out that ZIP now 'cause all's well now. After 6 hrs of downloading thru a mobile broadband hotspot running at only 14KB/sec speed due to my having gone over my T-Mobile hotspot plan's bandwidth amount (throttled-down after reaching the limit, tho not cut off completely. Kinda nice, but it's a huge speed drop).
I tried moving the two Mail.app versions around, compressing them & then trashing the original so they wouldn't be recognized, blabla, even booted my Mac in Safe Mode & reinstalled the "MacOSX 10.6.8 (Snow Leopard) Update Combo.dmg" update file, which in the past has fixed many problems. But after restarting, not this one.
Like a dummy who ignored knowing better, I had my Mail.app in a folder other than the Applications folder, with only an alias to that being in the Applications folder. NOT GOOD ENOUGH. The updater don't see that as nuthin special or useful.
So if you've got, like I've got, "old" icons for Mail.app (v4.5) in your Finder toolbar & in your Dock that all point to "Mail.app v4.5" in whatever folder you've got that in, other than in the Applications folder (where Apple apparently REQUIRES that it be located, and ONLY there, at least for OSX updating purposes), then after you download & autorun that "004" updater using Software Update, NONE of your pre-existing Mail icons will work. And MOST aggravatingly, **NOR** will your brand-new "Mail.app v4.6" work that came out of the "004" updating installation. So basically, your Mail.app's... all of 'em.... are hosed. But only if you run the "004" update without your "Mail.app v4.5" being located in your Applications folder and ONLY in your Applications folder. And duplicates of Mail.app, scattered around your HDD?? Always a problem with many Apple apps.... The Apple software engineers apparently like 'em to be in the Applications folder, and in ONLY there, and ONLY the latest version, and ONLY 1 single copy of each on your entire HDD. They just don't seem to stress that enough, it appears. Kind of an oversight for them to not emphasize that, IMO...
My recommendation for this particular September 2012 "004" update:
If you run Software Update, and if you see the "Security Update 2012-004" listed as available for download, UNCHECKMARK IT. DO NOT DOWNLOAD IT USING SOFTWARE UPDATE ! Instead, download the actual update file itself.
Same thing, only a different way of doing it. Most importantly, you'll be skipping the auto-installation that Software Update performs.
AND you'll have that update file on your HDD for future fixits, should a nasty "unfixable" problem come up.
First, #1. Do a filename search for "Mail" (Option-Command-Spacebar). Scroll down to where the "Apps" are located in the list under the "Kind" column heading. First, find your Mail.app that's v4.5. Get that bugger into your Applications folder if it's not already there. Next, Trash all other "Mail.app" apps you see in that same list that you may have elsewhere on your HDD.
#2. Go here: https://support.apple.com/kb/DL1586
And download the actual "004" DMG update file: "SecUpd2012-004.dmg"
And of course, it's a biggie.... 270MB... so watching grass grow may be involved here if you've got a slow connection (go to a MacDonalds & do it, like I shoulda done).
3. After downloading, I'd recommend closing down all apps, emptying the Trash, and restarting.
Then, after restarting, run Disk Utility's "Repair Disk Permissions."
Then, doublecheck that the Mail.app version 4.5 is in your Applications folder.
THEN fire up & install "SecUpd2012-004.dmg."
Reboot.
After the reboot, your Mail.app version 4.5 in the Applications folder will have become Mail.app version 4.6 in the Applications folder, and all will be well again.
And you can dump that zipped-up "Username -> Library -> Mail" folder then, too.
Happy Mac'in!
Kevin Kendall
Macbook 7,1
(Apple's very last all-white Macbook model)
2.4GHz - 256GB Crucial SSD - 8GB Crucial RAM
OS 10.6.8 Build 10K549 + Win 7 Ultimate thru VMWare Fusion v5.0.1

HT204053 Our family uses one Apple ID for all of our iPhones. We installed the update and now we are all getting each others photos and texts. How do we stop this?

Our family uses one Apple ID for all of our iPhone 5's. We installed the update and now we are all receiving each other's pictures and texts. How do we stop this?

Have a look here...
http://macmost.com/setting-up-multiple-ios-devices-for-messages-and-facetime.htm l

I do updates and then have to reinstall previous versions - time and time again because of the number of unsupported add-ons

4 or 5 times I've updated Firefox only to have to reinstall the previous version due to incompatibility with add-ons / plug-ins / toolbars. I'm not a big user of Toolbars but I have some add on I use daily.
The last 3 times I did a "suggested by Firefox" update I've had to reinstall a previous version from my saved files in order to use Firefox. This problem has caused me to return to IE as my default browser - but unwillingly.
My current setup is Firefox 4.0.1 Beta and I had to reinstall a version 3 in the Firefox folder until addons starting working in this 4.0.1 Beta. However 4.0.1 has always hung up, even opening a tab and ceases to respond; sometimes for minutes.
I run Win XP - SP3 Dell Pentium 4 - 3.0ghz with 4 gigs of DDR2 - GX520. So it's not an equipment problem - (I have 4 PC's on my home LAN - although each serves it's purpose and seldom are 2 used at the same time.
When I installed 4.0.1 and then reinstalled 3.x ... I've been hoping for an update --- I love Firefox - have ever since first use - and then today I saw the update versions had jumped from 4 all the way to 7. I was enthused.
Same issue. On install over the V 3.x it showed 6 items of add-ons that were incompatible. I did not remove the V 7 ... I simple reopened the 4.0.1 beta. I use it for single page browsing as tabs locks it up or slows it to a crawl.
I'm having to continue using IE as my default --- I always keep a backup browser, but I don't care for much of anything that has an MS on it's name.
I've never posted to Mozilla ... but the idea crossed my mind over a year ago when I updated and had to back-up and reinstall. WHY can't a program precede the update to check for compatibility, just as an upgrade adviser from one OS to another?
This was the biggest list of all. NET Framework Assistant, Google Toolbar, Yahoo Toolbar, Roboform ... there were 2 others. I don't use the Yahoo Toolbar. I have Google Toolbar installed but keep it hidden except when I need it (for Page Rank, etc., I work websites).
But I won't use a browser that doesn't support AI Roboform.
I honestly love Firefox. I code webpages - .asp, .html and do SEO ... but I don't know the difficulty of writing even a small application. Would it be too difficult to have a small program that would check for these add-on incompatibilities before installing the updates.
I was impressed with 4.0.1 beta until I realized that opening a new window or tab bogged it down.
I want Firefox back but not with band-aids and work-around bandages. Is there a version between 4.0.1 and v7 which I tried tonight that would support my plug-ins / add-on. My experience with Firefox using versions up to 3.x has been great. But for months and months I open 4.0.1 and open my TV guide at ZapIt and then I've had to use IE 8 for all my web browsing.
My most important add-on is for Roboform and 2nd would be for Google Toolbar - but on a scale of 1-10 Roboform is a 10+ and Google Toolbar a 3.
If this post does not go to the support team at Firefox then how would I go about suggesting an Update Adviser prior to installing an update?
Anyone with a flexible solution - even short term - that would allow me to see Firefox improvements since the v4 I'm using would be more appreciated than I could ever express.
Since I've never posted before I'm not even sure how I'll get a response or be able to see any responses. Something during the registration said I could get an email when a reply was posted.
Thanks again for listening to me whimper and beg for a workable Firefox; I miss it.

this is all I can find, thank you for your time.
Problem signature
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 1033
Files that help describe the problem
Mini010710-11.dmp
sysdata.xml
Version.txt
View a temporary copy of these files
Warning:If a virus or other security threat caused the problem, opening a copy of the files could harm your computer.
Extra information about the problem
BCCode: 1000007f
BCP1: 00000008
BCP2: 80176000
BCP3: 00000000
BCP4: 00000000
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1

Installed latest itunes update and computer tried to burn a playlist to CD and realized computer no longer recognizes my CD/DVD drive. This is an APPLE Itunes issue. Help!. HPPavillion DV6 64 bit, windows 7

Installed latest itunes update and computer tried to burn a playlist to CD and realized computer no longer recognizes my CD/DVD drive. After doing some data mining, found out from community this is an long standing APPLE problem- which doesn't get much tech support in terms of fixes. I have an HPPavillion DV6 64 bit, Windows 7 OS . After reading an earlier complaint from 2009 in the support community, I ran diagnostics from ITunes which gave the following result. Can someone please help? (I'm not enough of a techie to know what I'm doing or how to locate /reinstall CD drivers. I am searching for driver disc but cannot locate.)
Microsoft Windows 7 x64 Home Premium Edition Service Pack 1 (Build 7601)
Hewlett-Packard HP Pavilion dv6 Notebook PC
iTunes 10.6.3.25
QuickTime 7.7.2
FairPlay 1.14.43
Apple Application Support 2.1.9
iPod Updater Library 10.0d2
VoiceOver Kit 1.4.2 (222093/222742)
CD Driver 2.2.0.1
CD Driver DLL 2.1.1.1
Apple Mobile Device 5.2.0.6
Apple Mobile Device Driver 1.59.0.0
Bonjour 3.0.0.10 (333.10)
Gracenote SDK 1.9.6.502
Gracenote MusicID 1.9.6.115
Gracenote Submit 1.9.6.143
Gracenote DSP 1.9.6.45
iTunes Serial Number 0043AC7C0368E428
Current user is not an administrator.
The current local date and time is 2012-07-24 23:43:08.
iTunes is not running in safe mode.
WebKit accelerated compositing is enabled.
HDCP is supported.
Core Media is supported.
Video Display Information
ATI Technologies Inc., AMD M880G with ATI Mobility Radeon HD 4250
**** External Plug-ins Information ****
No external plug-ins installed.
iPodService 10.6.3.25 (x64) is currently running.
iTunesHelper 10.6.3.25 is currently running.
Apple Mobile Device service 3.3.0.0 is currently running.

Doublechecking ... did you have CD/DVD drive tests checked when you ran those diagnostics? (I'm not seeing the CD/DVD test results down the bottom of the results where I'd expect to see them.)
For example, here's what I get:
Microsoft Windows 7 x64 Ultimate Edition Service Pack 1 (Build 7601)
Acer Aspire X3400
iTunes 10.6.3.25
QuickTime 7.7.2
FairPlay 1.14.43
Apple Application Support 2.1.9
iPod Updater Library 10.0d2
CD Driver 2.2.0.1
CD Driver DLL 2.1.1.1
Apple Mobile Device 5.2.0.6
Apple Mobile Device Driver 1.59.0.0
Bonjour 3.0.0.10 (333.10)
Gracenote SDK 1.9.6.502
Gracenote MusicID 1.9.6.115
Gracenote Submit 1.9.6.143
Gracenote DSP 1.9.6.45
iTunes Serial Number 003CAD7C0A1258F8
Current user is not an administrator.
The current local date and time is 2012-07-26 10:42:53.
iTunes is not running in safe mode.
WebKit accelerated compositing is disabled.
HDCP is supported.
Core Media is not supported. (16008)
Video Display Information
ATI Technologies Inc., AMD Radeon HD 6570
**** External Plug-ins Information ****
No external plug-ins installed.
Genius ID: d6a87ba725121aa1240b1ce936c23470
iPodService 10.6.3.25 (x64) is currently running.
iTunesHelper 10.6.3.25 is currently running.
Apple Mobile Device service 3.3.0.0 is currently running.
**** CD/DVD Drive Tests ****
No drivers in LowerFilters.
UpperFilters: GEARAspiWDM (2.2.0.1),
E: ATAPI DVD A DH16ABSH, Rev YA12
Data or MP3 CD in drive.
Found 1 songs on CD, playing time 255:57 on CDROM media.
Track 1, start time 00:02:00
Get drive speed succeeded.
The drive CDR speeds are: 4.
The drive CDRW speeds are: 4.

ESA 8.5.6-092 Update and CVE-2011-1521 vulnerability ?

Similar Messages

Maybe you are looking for