Linux news 27.10.00

В продаже коробочные Linux-приложения Если большинство компаний, создающих Linux-ПО, нацелено на рынок серверных систем, то Chilliware кинулась в омут неизведанного настольного бизнеса. Подробнее: http://www.zdnet.ru/news.asp?ID=1910 Вышел Netscape Communicator 4.76 Вышла новая версия, за номером...

[SECURITY] Debian esound packages not affected by /tmp/.esd race condition

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 8, 2000 - ---------------------------------------------------------------------------- Package: esound Vulnerability:...

GnoRPM local /tmp vulnerability

While fixing other problems with the gnorpm package a locally exploitable security hole was found where a normal user could trick root running GnoRPM into writing to arbitary files due to a bug in the gnorpm tmp file handling. A new release of GnoRPM 0.95.1 is now available. This fixes significan...

Linux news 25.09.00

Linux Kernel 2.2.18pre10 Вешел десятый пререлиз нового ядра Linux - Linux Kernel 2.2.18. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-38/1086.html Linux Kernel pre-patch 2.4.0 test9-pre6 Новый, шестой по счету, пререлиз девятого тестового ядра Linux Kernel 2.4.0. Подробнее:...

glibc unsetenv bug

Hello, Two distribution vendors have recently issued updated packages and advisories regarding a glibc bug. While I don't consider this bug to be a serious security issue, a more detailed description of the bug and information on affected glibc versions is needed. I am forwarding a message I post...

Kerberos 4 4.05 5.0 - KDC Spoofing

Kerberos 4 4.05 5.0 - KDC Spoofing source: https://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service...

Linux news 5.07.00

Ядро 2.2.17pre10 В очередной pre версии стабильного ядра 2.2.17 Alan Cox добавил следующие патчи: обновлены драйвера, исправлена ошибка с eepro и cs46xx, обновлена документация. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Progress Software создает подразделение по...

Linux news 16.06.00

SCO планирует выпускать свой собственный дистрибутив Linux. По-моему сейчас не делает свои дистрибутивы Linux только ленивый. Лучше бы был один, но отличный. Подробнее: http://slashdot.org/articles/00/06/13/127228.shtml Интервью с Аланом Коксом На LinuxJournal выложено интервью с одним из главных...

Проблемы в нескольких утилитах из дистрибутива Mandrake

Переполнения буфера в xcdroast suidroot, gatos, xkobo, xbill, Gnome iagno,...

Microsoft Windows Media Services 4.04.1 - Denial of Service (MS00-038)

Microsoft Windows Media Services 4.04.1 - Denial of Service MS00-038 // source: https://www.securityfocus.com/bid/1282/info Windows Media Encoder is part of Windows Media Services. It's purpose is to convert content into a suitable format for video or audio streaming through the Media Services. I...

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This...

KDE 1.1/1.1.1/1.2/2.0 kscd - SHELL Environmental Variable

source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This makes it possible to obtain a sgid 'disk' shell. Using...

Linux news 25.04.00

SCALABLE VECTOR GRAPHICS SVG IN MOZILLA Язык SVG - язык описания двумерной графики. Соответствует стандартам XML, Cascading Style Sheets CSS, Document Object Model DOM, JavaScript, PNG, и JPEG. Таким образом, через Javascript вы можете, например, "привязать" вид двумерной картинки к параметрам...

Linux news 11.04.00

Linuxconf 1.17r10 Вышла новая версия мощной утилиты конфигурирования Linux систем. Это т.н. bugfix release. Пофиксен баг в модуле pppdialin ошибка в ppplogin и в модуле inetdconf. Подробнее: http://www.appwatch.com Возрожденная Amiga строит мультимедийную Linux-платформу Gateway строила грандиозн...

PT-1999-1415 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue is related to insecure directory permissions in the RPM distribution for PostgreSQL, allowing local users to gain privileges. This is achieved by reading a plaintext password...

adobe.acrobat.netbus.trojan.txt

Date:Tue, 6 Apr 1999 07:41:06 -0600 Reply-To:"Wamsley, James R" Sender:Windows NT BugTraq Mailing List From:"Wamsley, James R" Subject:Adobe put Trojan horse in Acrobat. Comments:To: "[email protected]" Comments:cc: "Samos, Randy B." We recently found an alarming problem with Adobe's...

insmod.linux.txt

Date: Tue, 30 Mar 1999 22:08:13 -0500 From: Brian Szymanski To: [email protected] Subject: linux insmod bug/security vulnerability Howdy all, Recently I discovered a bug in insmod that would require a lot of time and luck to exploit, but is nonetheless important for systems wanting rock-solid...

CVE-1999-0661

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...

ROS-2-2603

2.2603 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. If you have questions regarding the purchase of a new installation kit...

ROS-2-2685

2.2685 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. If you have questions regarding the purchase of a new installation kit...