“The big news this week is the SSH/OpenSSH/ScanSSH trademark
dispute. Also this week OpenSSH 2.5.0 is released, which has a
number of bug fixes and is fully interoperable with all other SSH
clients and servers (that’s what Theo says). As usual, there are
some vendors catching up. Debian has issued updates for ProFTPD and
XFree86. Trustix has also issued ProFTPD, Bind and OpenLDAP updates
as well as a fixed kernel. Some new tools have been released, like
FreSSH (although it’s still rough at the edges).”
“We lead off with general advisories and exploit code, then move
to vendor advisories. Most items appear in alphabetical order. If
we’re missing a Linux vendor’s advisory, please tell us – ditto for
any Linux-related security alerts. The long strings of hex in front
of package names are MD5 signatures.”