Half-dozen Microsoft patches coming Tuesday

Opinion
Nov 13, 20062 mins

* Patches from Microsoft, Mandriva, Gentoo, others * Latest e-mail hoaxes target personal data, pack virus * Social Security agency warns of e-mail scam

Before we get to the alerts of the day, a technical question sent in by a reader:

“I have found that I am unable to connect to secure Web sites with Symantec antivirus running.” If you’ve run into this problem and have a way around it, drop me a line at jmeserve@nww.com.

I’m hoping the collective intelligence of our subscribers can help!

Today’s bug patches and security alerts:

Microsoft to release six Windows security updates

Microsoft Corp. will release six groups of security patches next Tuesday, fixing flaws in its Windows operating system. The updates will be released as part of Microsoft’s regularly scheduled monthly patch release, and will fix critical flaws in Windows and the company’s XML parser, Microsoft said Thursday. IDG News Service, 11/09/06.

Microsoft advance advisory

**********

Three new patches from Mandriva:

Thunderbird (multiple flaws)

Firefox (multiple flaws)

openssh (privilege sync flaw)

**********

Two updates for Gentoo:

Netkit FTP Server (Privilege escalation)

Bugzilla (multiple flaws)

**********

Two patches for OpenPKG:

openssh (privilege sync flaw)

openldap (denial of service)

**********

Two fixes from Ubuntu:

imlib2 (regression flaw)

texinfo (buffer overflow, code xecution)

**********

Five patches from rPath:

openssh (privilege sync flaw)

Firefox/Thunderbird (multiple flaws)

php (multiple flaws)

kernel (denial of service)

TShark/WireShark (denial of service)

**********

Today’s big virus news:

Latest e-mail hoaxes target personal data, pack virus

A pair of e-mail hoaxes now making the rounds aim to steal personal and financial information or infect a user’s computer with a virus, according to the Internet Crime Complaint Center. Network World, 11/09/06.

**********

From the interesting reading department:

Social Security agency warns of e-mail scam

The U.S. Social Security Administration is warning the public about a fraudulent e-mail purporting to be from the agency and designed to lure users into divulging personal information. Computerworld, 11/10/06.