Microsoft to fix Windows, Office security flaws

Opinion
Oct 9, 20062 mins

* Patches from Microsoft, Debian, Trustix, others * Top 10 viruses for the past week * Hackers find use for Google Code Search, and other interesting reading

Today’s bug patches and security alerts:

Microsoft to fix Windows, Office security flaws

With hackers exploiting unpatched vulnerabilities in its Windows and Office software, Microsoft plans to issue 11 security updates next Tuesday. IDG News Service, 10/05/06.

**********

New Trustix multi update

The latest batch of security updates from Trustix fix flaws in PHP, PHP4, OpenLDAP. The most serious of the vulnerabilities can be exploited to run malicious code on an affected machine.

**********

New updates from rPath:

OpenSSH (denial of service)

nss_ldap (unauthorized access)

php (multiple flaws)

**********

New updates from Debian:

Mozilla (multiple flaws)

Mozilla Thunderbird (multiple flaws)

**********

New patches from Mandriva:

OpenLDA (access control list flaw)

Mozilla Thundebirds (multiple flaws)

**********

Top 10 viruses for the past week, according to Trend Micro:

1. Troj_Rootkit.E (28,630)

2. Troj_Generic (23,837)

3. Worm_Nyxem.E (12,781)

4. HTML_Netsky.P (8,092)

5. Worm_Netsky.DAM (7,437)

6. Worm_Anig.A (5,509)

7. Worm_Rontkbr.GEN (3,944)

8. Worm_Mydoom.GEN (3,762)

9. Adw_Ncase.A (3,698)

10. Pe_Funlove.4099 (3,055)

**********

From the interesting reading department:

Hackers find use for Google Code Search

Google has inadvertently given online attackers a new tool. The company’s new source-code search engine, unveiled Thursday as a tool to help simplify life for developers, can also be misused to search for software bugs, password information and even proprietary code that shouldn’t have been posted to the Internet, security experts said Friday. IDG News Service, 10/06/06.

End of support nears for Windows XP SP1

Microsoft is recommending that customers running Windows XP Service Pack 1 immediately upgrade to Windows XP SP2, as the company’s support for SP1 will end [this] week. IDG News Service, 10/06/06.