“This week, advisories for gpm, man, dhcp-client, Zope,
openldap, BitchX, pam, and nfs-utils were released. DHCP-client and
nfs-utils vulnerabilities can both theoretically be used to gain
remote root access.“
“LinuxSecurity.com just released the LinuxSecurity Quick
Reference Card. The reference is intended to provide a starting
point for improving system security. It includes references to
security resources, tips for securing Linux, and other general
security information.”
“Our feature this week is an interview with Carr Biggerstaff
& Thomas Haigh of Secure Computing, by Dave Wreski. The
interview discusses the state of Linux and security, its place in
secure business data centers, and their work with the National
Security Agency to create a Type-Enforced version of Linux.”