Monday, July 28, 2008

Debian Sarge and DNS Vuln VU#800113


Well blow me down - I didn't notice that Sarge has stopped being supported for security updates - as of March 2008

This makes it a bit trickier to patch up for the DNS cache poisoning advisory: VU#800113

But never fear - it's possible. Using aptitude, make sure your sources.list has etch hard coded (instead of sarge like you probably previously had), then run aptitude and start off selecting from bind9 and keep the minimum number of changes in order to resolve all broken links.

Once this is all done, you'll have to restart most daemons - aptitude will get most of them - I had to restart a few others that don't come with Debian.

Hope that helps some - sorry I'm low on the details - busy!

No comments: