“This week it’s ypbind, some more Apache (1.3.14 was
released), PHP (from last week), and MySQL. Oracle has also had
quite a few problems revealed this week – three advisories on
separate problems from separate groups. You definitely want to
be restricting access to Oracle’s administrative functions as much
as possible.”
“We lead off with general advisories and exploit code, then move
to vendor advisories. Most items appear in alphabetical order. If
we’re missing a Linux vendor’s advisory, please tell us – ditto for
any Linux-related security alerts. The long strings of hex in front
of package names are MD5 signatures.”