Linux Today: Linux News On Internet Time.
Search Linux Today
Linux News Sections:  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Contribute
Contribute
Link to Us
Linux Jobs



Top White Papers




More on LinuxToday

Security Linux News for Dec 05, 2001

  • Debian Security Advisories: ssh, icecast server, and fml (Dec 05, 2001, 22:30)
    Debian has released several security updates affecting OpenSSH, icecast server, and fml. Complete advisories and links within.

  • VNUNet.com: Linux lined up as virus target (as 'Goner' spreads woe and a typo) (Dec 05, 2001, 15:17)
    "'Of course we will see more and more attacks on Windows, but Linux will be a target because its use is becoming more widespread,' said Raimond Genes, European president for antivirus at Trend Micro. 'It is a stable OS, but it's not a secure OS.'"

  • Red Hat Security Advisory: Updated OpenSSH packages available (Dec 05, 2001, 04:32)
    "When the "UseLogin" option is enabled in OpenSSH, a malicious user who authenticates using key-based authentication methods can influence the environment variables passed to the login process. This could allow the user to execute arbitrary code with superuser privileges."

  • Red Hat Security Advisory: Updated apache packages available (Dec 05, 2001, 00:34)
    "Updated Apache packages are now available for Red Hat Linux 6.2, 7, 7.1, and 7.2. These packages upgrade the Apache Web server to version 1.3.22, which closes a potential security bug which would present clients with a listing of the contents of a directory instead of the contents of an index file, or in case of an error, the error message."

  • Red Hat Security Advisory: Updated OpenSSH packages available (Nov 30, 2001, 17:43)
    "Updated OpenSSH packages are now available for Red Hat Linux 7, 7.1, and 7.2. These updates fix a bug in handling of restricted keys which may allow users to bypass command restrictions by using subsystems and a subtle bug which might aid a passive analysis attack."