Soft sailing in September patch run

Powered by SC Magazine
 

But crypto upgrade may make for a rough October.

Microsoft will release two easy Patch Tuesday bulletins rated 'important' to address four issues in Visual Studio Team Foundation Server and System Center Configuration Manager and address privilege elevation flaws.

"The first patch, rated important, will apply to Visual FoxPro, which is a set of tools used to create and manage high-performance, 32-bit database applications and components," Trustwave SpiderLabs security research director Ziv Madorat said.

“The second patch, also rated important, will apply to System Center Configuration Manager, which helps manage physical, virtual and mobile clients with things like application delivery, desktop virtualisation and security.”

nCircle security operations director Andrew Storms said September patch run will be a "very light month".

"IT security teams shouldn't be lulled into a false sense of security though, they should use this time to get caught up applying existing patches and to change or replace cryptographic key lengths on the certificates used for older Microsoft systems.”

Some administrators will be sent scrambling next month to update cryptographic keys for Public Key Infrastructure in line with Redmond's move to increase key length to at least 1024 bits for Windows platforms dating back to XP. 

The security boost was flagged last year and will block programs from interacting with systems that use keys shorter than 1024 bits. Internet Explorer, for example, will not be able to access secure sites that use certificates with short keys.

Angela Gunn from Microsoft's Trustworthy Computing flagged a series of errors which adminstrators of legacy architecture may experience.

  • Error messages when browsing to web sites that have SSL certificates with keys that are less than 1024 bits
  • Problems enrolling for certificates when a certificate request attempts to utilize a key that is less than 1024 bits
  • Difficulties creating or consuming email (S/MIME) messages that utilize less than 1024 bit keys for signatures or encryption
  • Difficulties installing Active X controls that were signed with less than 1024 bit signatures
  • Difficulties installing applications that were signed with less than 1024 bit signatures (unless they were signed prior to Jan. 1, 2010, which will not be blocked by default)

With Darren Pauli.

Copyright © SC Magazine, UK edition


Soft sailing in September patch run
 
 
 
Top Stories
Microsoft confirms Australian Azure launch
Available from next week.
 
NBN Co names first 140 FTTN sites
National trial extended.
 
Cloud, big data propel bank CISOs into the boardroom
And this time, they are welcome.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Do you direct debit customers? Read this
Oct 10, 2014
Authorities have been targeting direct debit practices with iiNet and Dodo receiving formal ...
Optus expands 4G coverage
Oct 10, 2014
If you rely on an Optus phone for work you might be interested to know that there are now 200 ...
Microsoft Office is now free for some charities
Oct 10, 2014
Microsoft has announced that eligible Australian non-profit organisations and charities can now ...
Vodafone lights up 4G in Adelaide
Oct 9, 2014
Live and work in Adelaide? Vodafone has switched on its 4G network in the city and suburbs.
Next year tradies will be able to take payments using ingogo
Oct 3, 2014
Ingogo is going to provide a card payment service for Xero users.
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  25%
 
Sourcing and strategy
  12%
 
IT infrastructure (servers, storage, networking)
  22%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  27%
TOTAL VOTES: 265

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  61%
 
No
  39%
TOTAL VOTES: 84

Vote