* Patches from Trustix, Ubuntu, Mandriva, others * Super Bowl infection much more widespread * Hackers slow Internet root servers with attack, and other interesting reading
Today’s bug patches and security alerts:
Microsoft: Excel vulnerable to new attack
With its February security patches now two weeks away, Microsoft is warning of another critical flaw in its Office software. IDG News Service, 02/05/07.
**********
Zero-day Mac-repair project to continue
Landon Fuller, the former Apple engineer who coordinated fixes for January’s “Month of Apple Bugs” project, has said he plans to continue to release fixes for zero-day Mac OS X bugs. TechWorld, 02/05/07.
Final Month of Apple Bug discoveries:
Apple iChat Bonjour Multiple Denial of Service Vulnerabilities
Multiple Apple Software Format String Vulnerabilities
“Unspecified Kernel Remote Fun”
**********
Hackers target hole in BrightStor
Antivirus firm Symantec warned Friday that exploit code is circulating for a known security hole in CA’s BrightStor ARCServe Backup software, which provides data backup and restore for a variety of operating systems including Windows, Netware, Linux,Unix, and Mac. InfoWorld, 02/02/07.
**********
Trustix releases new ‘multi’ update
The latest round of updates from Trustix fixes flaws bind, ed and elinks. The vulnerabilities could be exploited in denial-of-service attacks or to potentially execute arbitrary code on an affected machine.
**********
Four new updates from rPath:
rmake (root privileges, code execution)
wireshark and tshark (denial of service)
postgresql (denial of service, information disclosure)
**********
Four new patches from Ubuntu:
KDE library (cross-scripting flaw)
PostgreSQL 8.1 (regression error)
**********
Two new fixes from Debian:
Mozilla Firefox (multiple flaws)
**********
Seven new patches from Mandriva:
**********
Big virus news of the week:
Super Bowl infection much more widespread
Security experts are finding an increasing number of Web sites hosting malicious JavaScript code first detected on Super Bowl-related sites last week. IDG News Service, 02/05/07.
**********
From the interesting reading department:
For all the news coming out of the RSA conference in San Francisco this week, visit our RSA HQ page:
Hackers slow Internet root servers with attack
Online attackers have briefly disrupted service on at least two of the 13 “root” servers that are used to direct traffic on the Internet. IDG News Service, 02/06/07.
Cybercrime calculator targets hackers, terrorists
The University of New Hampshire has unveiled a tool for gauging the level of threat any would-be attacker poses to the energy, emergency response or other sectors of the U.S. economy and infrastructure that rely heavily on IT and networks. Network World, 02/06/07.
