* Patches from VMware, Trustix, rPath, others * Top 10 viruses in November * Existing malware could affect Vista, and other interesting reading
Today’s bug patches and security alerts:
VMware warns of flaw in VirtualCenter client
A flaw in the way SSL certificates are handled by VMware VirtualCenter client 2.x could be exploited via a man-in-the-middle attack, resulting in a client connecting to a malicious server. A fix is available.
**********
Three new Trustix updates:
**********
Four patches from rPath:
gnupg (buffer overflow, code execution)
**********
Four new fixes from Debian:
libgsf (buffer overflow, code execution)
**********
Five patches from Mandriva:
ImageMagick (multiple buffer overflows)
koffice (integer overflow, code execution)
gnupg (buffer overflow, code execution)
libgsf (heap overflow, code execution)
**********
Top 10 viruses reported in November, according to Sophos:
1. W32/Stratio-Zip (33.3%)W32/Netsky-P (15.6%)W32/Bagle-Zip (6.1%)W32/Zafi-B (4.3%)W32/Netsky-D (3.9%)W32/Nyxem-D (2.5%)W32/MyDoom-O (2.5%)W32/Mytob-C (2.4%)W32/Sality-AA (1.8%)W32/Zafi-D (1.7%)
2.
3.
4.
5.
6.
7.
8.
9.
10.
**********
From the interesting reading department:
Existing malware could affect Vista users, Sophos says
Microsoft has touted Vista as a more secure version of Windows, but on the day of Vista’s official launch, a security company has identified malware already in circulation that can infect computers running the operating system. IDG News Service, 11/30/06.
McAfee offers ISS customers a special switch program
McAfee Thursday made a special pitch to customers of IBM’s Internet Security Systems division, offering them what McAfee says is up to $40,000 in incentives to switch to McAfee security products. Network World, 12/01/06.
F-Secure takes aim at rootkits on Windows XP, Vista
F-Secure Thursday is announcing an upgraded version of its Client Security antivirus and desktop firewall software, adding rootkit detection and host-based intrusion prevention. Network World, 11/30/06.
Jihadists publish cyber security magazine
Jihadists now have their own security magazine. “Technical Mujahid,” a 64-page electronic magazine began circulating earlier this week on jihadist discussion forums, said Adam Raisman, an analyst with the SITE (Search for International Terrorist Entities) Institute, a terrorist tracking organization. IDG News Service, 12/01/06.
