Archive for March, 2007

apt-get update NO_PUBKEY

It has been a while since my last maintenance on office debian server. It’s just my plain laziness. :p I was quite happy with apt tool set for debian box maintenance.

Happily, I fired up the command, apt-get update and it complained about NO_PUBKEY for 2 public keys. Am I missing something?

(more…)

Tuesday, March 27th, 2007

Y0, wassup with ya nameservers?

It is damn irritating to see our national major ISPs’ nameservers failed to resolve/fail on RBL lookup while the rest of the world seem to be able to resolve just fine.

Mar 19 10:56:22 mail postfix/smtpd[47414]: warning: 53.48.14.24.sbl.spamhaus.org: RBL lookup error: Host or domain name not found. Name service error for name=53.48.14.24.sbl.spamhaus.org type=A: Host not found, try again
Mar 19 10:56:24 mail postfix/smtpd[47449]: warning: 140.201.248.143.sbl.spamhaus.org: RBL lookup error: Host or domain name not found. Name service error for name=140.201.248.143.sbl.spamhaus.org type=A: Host not found, try again

(more…)

Monday, March 19th, 2007

Month of PHP bugs and extensions.ini “magic” order madness

Just came across this while tracking the cause of frequent apache crashes on one of the development boxes running on FreeBSD. Default installation of PHP from FreeBSD’s ports includes Suhosin patch which aims to harden PHP. Well, it’s good to have good people looking after the security of PHP.

The Month of PHP Bugs

“formerly known as March”

"This initiative is an effort to improve the security of PHP. However we will not concentrate on problems in the PHP language that might result in insecure PHP applications, but on security vulnerabilities in the PHP core. During March 2007 old and new security vulnerabilities in the Zend Engine, the PHP core and the PHP extensions will be disclosed on a day by day basis. We will also point out necessary changes in the current vulnerability managment process used by the PHP Security Response Team." - Month of PHP bugs.

(more…)

Tuesday, March 6th, 2007