Security Portal: Weekly Linux Security Digest 2000/11/20 to 2000/11/26

Nov 27, 2000, 08:40 (0 Talkback[s])
(Other stories by Kurt Seifried)

"A busy week for Debian, Conectiva and others. Problems in tcpdump, ethereal, pine, joe, and Gaim. Most vendors are still playing catch-up, and on some issues, such as pine, it is unclear who is suffering exactly what problem - remote DoS, code execution, etc. The good news (as almost always) is that some vendors have gotten quite a bit better at producing security advisories, giving credit, and getting them out timely. Now if only Debian would number its advisories (hint, hint)."

"We lead off with general advisories and exploit code, then move to vendor advisories. Most items appear in alphabetical order. If we're missing a Linux vendor's advisory, please tell us - ditto for any Linux-related security alerts. The long strings of hex in front of package names are MD5 signatures."

Complete Story

Related Stories:

• Security Portal: Weekly Linux Security Digest 2000/11/13 to 2000/11/19(Nov 20, 2000)
• Security Portal: Weekly Linux Security Digest 2000/11/06 to 2000/11/12(Nov 13, 2000)
• Security Portal: Weekly Linux Security Digest 2000/10/30 to 2000/11/05(Nov 06, 2000)
• Security Portal: Weekly Linux Security Digest 2000/10/23 to 2000/10/29(Oct 30, 2000)
• Security Portal: Weekly Linux Security Digest 2000/10/16 to 2000/10/22(Oct 23, 2000)
• Security Portal: Weekly Linux Security Digest 2000/10/09 to 2000/10/15(Oct 17, 2000)
• Security Portal: Weekly Linux Security Digest 2000/10/02 to 2000/10/08(Oct 09, 2000)