* Patches from Ubuntu, Debian, Gentoo, others * Top 10 viruses reported to Sophos in September * McAfee buys security compliance vendor for $60 million, and other interesting reading
Today’s bug patches and security alerts:
Mozilla duped by hacker’s ‘humorous’ presentation
One of the hackers who demonstrated exploit code for a vulnerability in the way the Firefox browser handles Javascript at a hacker conference in San Diego admitted Tuesday that the presentation was meant to be a joke, according to the chief of security for Mozilla. IDG News Service, 10/03/06.
**********
New patches from Ubuntu:
ffmpeg, xine-lib (multiple buffer overflows, code execution)
gdb (buffer overflow, code execution)
openssh (denial of service)
OpenSSL (multiple flaws)
**********
New fixes from Debian:
mailman (format string vulnerability)
**********
New updates for Gentoo:
Mozilla Thunderbird (multiple flaws)
Flash Player (input validation error, code execution)
**********
New patches from Mandriva:
ntp (affected by OpenSSL flaw)
MySQL (affected by OpenSSL flaw)
**********
New fixes for OpenPKG:
**********
New rPath updates:
**********
Top 10 viruses reported to Sophos in September:
Others: 36.3%
**********
From the interesting reading department:
Akonix appliance aims to give IT Skype controls
Akonix Tuesday released a management appliance intended to help corporate IT gain a measure of control over the popular voice application Skype. NetworkWorld.com, 10/03/06.
Open source router tempts company to bid Cisco firewall farewell
As open source router start-up Vyatta formally launches its first appliance this week, one early adopter is using the Linux-based gear to replace Cisco technologies. Network World, 10/02/06.
McAfee buys security compliance vendor for $60 million
McAfee will pay $60 million to acquire Citadel Security Software, a producer of security compliance products that ensure corporate employees are using assigned IT policies. IDG News Service, 10/03/06.
Prevention is better than cure
Encryption supplier PGP has announced NetShare, an encryption product for sharing Windows files securely around a network. It has also updated other security offerings as NetShare on its own is not enough. TechWorld, 10/04/06.
