-
Mozilla Firefox 1.0.7 Released
Date: 09/21/05
(Mozilla) Keywords: security, linux
FYI, Mozillazine publicly announced today that Firefox 1.0.7, is now available for download. Fixes are included for the international domain name (IDN) link buffer overflow vulnerability and the Linux command line URL parsing flaw. There are also other security and stability changes, including a fix for a crash experienced when using certain Proxy Auto-Config scripts. In addition, some regressions introduced by previous 1.0.x security updates have been resolved. An equivalent update to the Mozilla Application Suite, Mozilla 1.7.12, is expected shortly.
For more information regarding this announcement, kindly click here Mozilla Firefox 1.0.7 Released
For download site, please click here Firefox Product Page
Regards,
Omar.-
Source: http://www.livejournal.com/community/mozilla/321296.html
-
Wireless devices could foil hijack attempts
Date: 09/22/05
(Security) Keywords: security
Federal regulators are suggesting--but not requiring--wireless alert devices that could tip pilots off to security problems.
Source: http://news.zdnet.com/Wireless+devices+could+foil+hijack+attempts/2100-1009_22-5876245.html?part=rss&tag=feed&subj=zdnn
-
Botnets on the rise in Asia, Symantec says
Date: 09/22/05
(Security) Keywords: security
Hijacking of systems by hackers grew by more than 140 percent in China alone, according to security firm's report.
Source: http://news.zdnet.com/Botnets+on+the+rise+in+Asia%2C+Symantec+says/2100-1009_22-5876671.html?part=rss&tag=feed&subj=zdnn
-
Cell phone virus tries leaping to PCs
Date: 09/22/05
(Security) Keywords: security, virus
A virus discovered Wednesday is among the first designed to spread from smart phones to PCs, says security firm F-Secure.
Source: http://news.zdnet.com/Cell+phone+virus+tries+leaping+to+PCs/2100-1009_22-5876664.html?part=rss&tag=feed&subj=zdnn
-
Name that worm--plan looks to cut through chaos
Date: 09/22/05
(Security) Keywords: security
Plethora of different handles for the same threat can confuse security efforts. Common-identifier scheme looks to fix that.
Source: http://news.zdnet.com/Name+that+worm--plan+looks+to+cut+through+chaos/2100-1009_22-5876293.html?part=rss&tag=feed&subj=zdnn
-
URGENT: Upgrade to Firefox 1.0.7 ASAP!
Date: 09/23/05
(Mozilla) Keywords: security
As most of you should know, Firefox 1.0.7 (and Mozilla 1.7.12) were just released, with numerous security fixes...most notably, the IDN flaw. Apparently exploit code was just released for this flaw, which could allow an attacker to take control of your computer remotely. Therefore, ALL Firefox users should upgrade IMMEDIATELY to Firefox 1.0.7 (unless you're using one of the Deer Park Alphas, Firefox 1.5 Beta 1, or a nightly...then you should upgrade to the latest nightly). This is a very serious flaw...please patch!
Download Firefox here.
X-posted to firefoxusers.
Source: http://www.livejournal.com/community/mozilla/321991.html
-
Warnings out on Hurricane Rita scams
Date: 09/23/05
(Security) Keywords: security
As the hurricane barrels down on the Gulf Coast, security experts are bracing to combat the online donation fraud expected to follow.
Source: http://news.zdnet.com/Warnings+out+on+Hurricane+Rita+scams/2100-1009_22-5878884.html?part=rss&tag=feed&subj=zdnn
-
Firefox 1.0.7 Fixes Several Critical Vulnerabilities; Recommended Upgrade
Date: 09/24/05
(Java Web) Keywords: security, linux
Firefox 1.0.7 is a security and stability release. It is strongly recommend that all users upgrade to this latest version.
This version includes several security and stability fixes, including a fix for a reported buffer overflow vulnerability and a fix for a Linux shell command vulnerability. Details below.
Specific changes in Firefox 1.0.7
Fix for a potential buffer [...]
Source: http://blog.taragana.com/index.php/archive/firefox-107-fixes-several-critical-vulnerabilities-recommended-upgrade/
-
Ellison: Encryption is key to data protection
Date: 09/23/05
(Security) Keywords: security, microsoft
Oracle's chief also boasts about his company's security prowess while taking shots at Microsoft's efforts.
Source: http://news.zdnet.com/Ellison%3A+Encryption+is+key+to+data+protection/2100-1009_22-5879101.html?part=rss&tag=feed&subj=zdnn
-
Safe Browsing...
Date: 09/27/05
(Opera Browser) Keywords: security
Opera 8.x
Advisories: 8
Highest Criticality: Moderate
Impact: Spoofing, Cross Site Scripting, Security Bypass.
Status: 100% patched
Firefox 1.x
Advisories: 24
Highest Criticality: Extreme
Impact: System access, DoS, Privilege escalation, Exposure sensitive info, Exposure system info, Manipulation of data, Spoofing, Cross Site Scripting, Security bypass, Hijacking.
Status: 83% patched
Internet Explorer 6.x
Advisories: 86
Highest Criticality: Extreme
Impact: System access, DoS, Exposure sensitive info, Exposure system info, Manipulation of data, Spoofing, Cross Site Scripting, Security bypass, Hijacking.
Status: 56% patched
Source: http://www.livejournal.com/community/opera_browser/44591.html
-
Tax breaks for cybersecurity firms?
Date: 09/27/05
(Security) Keywords: security
California congressman working on cybersecurity guidelines favors a light regulatory touch and heavy private sector involvement.
Source: http://news.zdnet.com/Tax+breaks+for+cybersecurity+firms%3F/2100-1009_22-5884149.html?part=rss&tag=feed&subj=zdnn
-
RealPlayer, Helix users at risk of attack
Date: 09/27/05
(Security) Keywords: security, linux
Media players running on Linux face a new security vulnerability that could leave users open to remote attacks, security experts say.
Source: http://news.zdnet.com/RealPlayer%2C+Helix+users+at+risk+of+attack/2100-1009_22-5884096.html?part=rss&tag=feed&subj=zdnn
-
Microsoft probes report of IE flaw
Date: 09/28/05
(Security) Keywords: security
"Moderately critical" flaw could let an outsider manipulate data on a PC or aid in spoof-based attacks, security experts say.
Source: http://news.zdnet.com/Microsoft+probes+report+of+IE+flaw/2100-1009_22-5841381.html?part=rss&tag=feed&subj=zdnn
-
A trusted Linux milestone
Date: 09/28/05
(Open Source) Keywords: security
Fedora users will have the security capabilities while the feds are still evaluating it, and their implementations could easily beat that of the feds to market, assuming code works as advertised.
Source: http://blogs.zdnet.com/open-source/?p=454&part=rss&tag=feed&subj=zdblog
-
Scare tactics don't rattle Mac users
Date: 09/29/05
(Security) Keywords: security
Commentary--Security vendor Symantec has once again pointed the knife at Apple Macintosh users.
Source: http://news.zdnet.com/Scare+tactics+don%27t+rattle+Mac+users/2100-1009_22-5885334.html?part=rss&tag=feed&subj=zdnn
-
Mozilla Thunderbird 1.0.7 Has Been Released
Date: 10/01/05
(Mozilla) Keywords: security, linux
On Thursday, September 29, mozillaZine officially announced that Mozilla Thunderbird 1.0.7 was available for download. Amongst other changes, this new release includes fixes for a return receipt regression introduced in version 1.0.2 (bug 289091) and the Linux command line URL parsing security flaw.
According to mozillaZine, the Linux command line URL parsing security flaw "could allow an attacker to execute arbitrary commands on a victim's system. The bug exists in the Linux shell scripts that Firefox and the Mozilla Application Suite rely on to parse URLs supplied on the command line or by external programs. If the supplied URL contains any Linux commands enclosed in backticks, these will be executed before Firefox or the Mozilla Application Suite tries to open the URL. Variables such as $HOME will also be expanded." For more information regarding this security flaw, click here
Thunderbird 1.0.7 can be downloaded from the Thunderbird Product Page
Note: It is recommended that all Thunderbird users upgrade to this latest version at their earliest convenience.
Source: http://www.livejournal.com/community/mozilla/324942.html
-
Symantec ties up BindView buy
Date: 10/03/05
(Security) Keywords: security
Security company continues spree with $209 million purchase of compliance specialist BindView.
Source: http://news.zdnet.com/Symantec+ties+up+BindView+buy/2100-1009_22-5887807.html?part=rss&tag=feed&subj=zdnn
-
Worms biting harder into IM, P2P
Date: 10/04/05
(Security) Keywords: security
Security threats that take aim at instant messaging and peer-to-peer networks are rocketing--and getting smarter, according to research reports.
Source: http://news.zdnet.com/Worms+biting+harder+into+IM%2C+P2P/2100-1009_22-5888062.html?part=rss&tag=feed&subj=zdnn
-
Microsoft to provide security strategy update
Date: 10/05/05
(Security) Keywords: security, microsoft
CEO Steve Ballmer and security chief Mike Nash are expected to detail Microsoft's security strategy and product plans on Thursday.
Source: http://news.zdnet.com/Microsoft+to+provide+security+strategy+update/2100-1009_22-5888907.html?part=rss&tag=feed&subj=zdnn
-
Nokia to inoculate phones with antivirus
Date: 10/05/05
(Security) Keywords: software, security
Through software pact with Symantec, phone maker plans to ward off security threats to mobile handsets.
Source: http://news.zdnet.com/Nokia+to+inoculate+phones+with+antivirus/2100-1009_22-5889450.html?part=rss&tag=feed&subj=zdnn