* Patches from Mandriva, Debian, rPath * Most malware comes from legit sites, says researcher * Hackers hit Scientology with online attack, and other interesting reading
This makes it three weeks in a row now that Microsoft has had to offer up yet another patch. This time, the company is offering a quick fix for a bug in Mac Office 2008. The release comes on the heels of a report from the company that says Vista is more secure than Windows XP and open source operating systems. Finally, hopefully you’re not one of the 14,000 people that had their e-mail accounts accidently deleted by Charter Communications.
Microsoft offers quick fix for Mac Office 2008 bug
Microsoft Corp.’s Macintosh group has come up with a work-around to fix bungled installations of the new Office for Mac 2008. The move followed reports earlier this week that Microsoft’s newest suite incorrectly assigned full read and write access to a nonadministrative user if the Mac is set up with multiple accounts, as are most machines used in business. Computerworld, 01/25/08.
**********
Seven new patches from Mandriva:
Pulseaudio (programming flaw, root privileges)
icu (multiple flaws, code execution)
x11-server-xgl (multiple flaws)
libxfont (heap overflow, code execution)
**********
Three new fixes from Debian:
gforge (cross-scripting attack)
exiv2 (integer overflow, code execution)
**********
Two new updates from rPath:
CherryPy (directory traversal, file access)
**********
Today’s malware news:
It seems as though you don’t even have to go to the trouble of signing up for a profile with one social networking site, or even provide content – they can do it for you! Symantec Security Response blog, 01/25/08.
Most malware comes from legit sites, says researcher
The majority of Web sites serving up attack code are legitimate domains that have been hacked by criminals, a security researcher said in a report released Wednesday. It’s the first time that legitimate sites outnumber the malicious ones hackers purposefully set up to spread malware. Computerworld, 01/23/08.
**********
From the interesting reading department:
Microsoft: Vista more secure than XP and open source
Windows Vista was hit by significantly fewer publicly disclosed security flaws in its first year than Windows XP and open source rivals in their first years, according to a report from Microsoft. TechWorld, 01/24/08.
Oops: Charter Communications deletes 14,000 e-mail accounts
Charter Communications acknowledged today that it had inadvertently deleted about 14,000 of its customers’ e-mail accounts. Network World, 01/24/08.
Hackers hit Scientology with online attack
A group of hackers calling itself “Anonymous” has hit the Church of Scientology’s Web site with an online attack. The attack was launched Jan. 19 by Anonymous, which is seeking media attention to help “save people from Scientology by reversing the brainwashing,” according to a Web page maintained by Anonymous. IDG News Service, 01/26/08.
