Linux Today: Linux News On Internet Time.

More on LinuxToday

Security Linux News for Apr 30, 2002

  • SuSE Linux Announcement: sudo (Apr 30, 2002, 20:59)
    "Sudo contains a heap overflow in its prompt assembling function. The input used to create the password prompt is user controlled and not properly length-checked before copied to certain heap locations. This allows local attackers to overflow the heap of sudo, thus executing arbitrary commands as root..."

  • LinuxPlanet: Astaro: A "Swiss-Army Knife" of Security Software (Apr 30, 2002, 19:00)
    Astaro Security's software is becoming a strong player in a widening market as more and more clients find they need the strength of heavy-duty security, the flexibility of open source, and the pricing that won't blow the IT budget out of the water. Jacqueline Emigh reports.

  • Caldera Advisory: Race Condition in fileutils (Apr 30, 2002, 13:26)
    "A race condition in various utilities from the GNU fileutils package may cause a root user to delete the whole filesystem..."