* Patches from Microsoft, OpenPKG, Debian, others * Top 5 viruses for the week, as reported to CA * Top 10 security companies to watch, and other interesting reading
Today’s bug patches and security alerts:
Microsoft reissues buggy patch for Win 2000 users
Microsoft has reissued a Windows security patch that it published last week because the software did not work properly on Windows 2000 systems. IDG News Service, 10/19/06.
Microsoft says reported IE 7 bug not in browser
A flaw that research firm Secunia claimed to have discovered in Internet Explorer 7 just hours after its unveiling is not a browser bug after all, Microsoft said Thursday. Instead, the problem lies in a component of Microsoft’s Outlook Express e-mail client, which can be triggered by the browser. IDG News Service, 10/19/06.
**********
Three flaws in the Drupal open source content management system have been fixed. The most serious of these could be exploited to run malicious code on an affected system:
Drupal 4.6.10 / 4.7.4 fixes multiple XSS issues
Drupal 4.6.10 / 4.7.4 fixes CRF issue
Drupal 4.6.10 / 4.7.4 fixes HTML attribute injection issue
**********
Three new updates from OpenPKG:
drupal (cross scripting, privilege escalation)
php (privilege escalation, code execution
**********
Two new patches from Debian:
cheesetracker (buffer overflow)
**********
Two patches from rPath:
**********
Virus news:
Racy pics of Russian pop duo t.A.T.u tempt e-mail users
Researchers at IT security vendor Sophos today warned of new spyware Trojan horse that promises racy pictures of the teenage Russian pop group t.A.T.u. as a means to entice e-mail users to click on a malicious attachment. Network World, 10/19/06.
Top 5 viruses for the week, as reported to CA:
**********
From the interesting reading department:
Top 10 security companies to watch
These companies aim to simplify, extend, boost security. Network World, 10/19/06.
Microsoft, McAfee trade barbs over Vista security
Microsoft on Friday defended the process for disclosing key security information about its upcoming Vista operating system after security vendors continued to complain it’s too slow and not detailed enough. IDG News Service, 10/2006.
