internetnews.com: Linux Heavies Issue Patches

"Linux vendors Red Hat, Novell/SUSE, Mandrakesoft, Debian and Gentoo have issued advisories and patches this week for a number of different vulnerabilities that have hit them.

"Red Hat issued updates for its libtiff package, which includes a function library for manipulating TIFF image files. Security research firm iDefense had reported an integer overflow bug that affected the package that could have allowed an attacker to exploit it when open, causing an image to crash or execute arbitrary code..."

Complete Story

Related Stories:

• internetnews.com: Torvalds Criticizes Security Approaches(Jan 14, 2005)
• LWN: grsecurity 2.1.0 and Kernel Vulnerabilities(Jan 10, 2005)