* Patches from Conectiva, OpenPKG, HP, others * Beware latest Sdbot, Sasser variants * When outsourcing, don't forget security, experts say, and other interesting reading