Linux Today: Linux News On Internet Time.

More on LinuxToday

Security Linux News for Feb 21, 2002

  • InfoWorld: Microsoft expands shared source open code program (2002-02-21 23:36:58)
    "Microsoft Corp. , trying to protect its software empire from open-source rivals like Linux, on Thursday said it is expanding a program to share the underlying code of its Windows operating system."

  • Debian Security Advisory: gnujsp (2002-02-21 18:23:31)
    "Thomas Springer found a vulnerability in GNUJSP, a Java servlet that allows you to insert Java source code into HTML files. The problem can be used to bypass access restrictions in the web server. An attacker can view the contents of directories and download files directly rather then receiving their HTML output. This means that the source code of scripts could also be revealed."

  • Squid Proxy Cache Security Update Advisory: three issues (2002-02-21 17:12:54)
    Three security issues have recently been found in the Squid-2.X releases up to and including 2.4.STABLE3 dealing with a memory leak in the SNMP interface; a buffer overflow in the implementation of ftp:// URLs, and a bug in disabling the optional HTCP interface.

  • VNUNet.com: Linux for the paranoid (2002-02-21 13:49:52)
    "What started out as a secure, single floppy, bootable Linux distribution for storing PGP keys, and encrypting, signing and wiping files, turned into a useable Linux distribution for the totally paranoid."