Showing all newswire headlines

View by date, instead?

« Previous ( 1 ... 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 ... 2353 ) Next »

Debian alert: New tcpdump packages fix denial of service

  • Mailing list; By Matt Zimmerman <mdz@debian.org> (Posted by dave on Apr 6, 2004 3:52 PM EST)
  • Story Type: Security Alert; Groups: Debian
tcpdump, a tool for network monitoring and data acquisition, was found to contain two vulnerabilities whereby tcpdump could be caused to crash through attempts to read from invalid memory locations. This bug is triggered by certain invalid ISAKMP packets.

"Is Linux more secure than Windows?" - Debian, Mandrakesoft, Red Hat and SUSE answer.

GNU/Linux vendors Debian, Mandrake, Red Hat, and SUSE have joined together to give a common statement about the Forrester report entitled "Is Linux more Secure than Windows?".

Debian Weekly News - April 6th, 2004

  • Mailing list; By Martin Schulze <joey@infodrom.org> (Posted by dave on Apr 6, 2004 12:14 PM EST)
  • Story Type: Announcements; Groups: Debian
Welcome to this year's 14th issue of DWN, the weekly newsletter for the Debian community. Manoj Srivastava sent out the final call for votes on the project leader election and revealed that 351 of the 908 developers have already voted. Andreas Schuldei is still looking for ideas for talks for the upcoming Debian Conference.

Open source has no future in RP

  • eBCVG (Posted by dave on Apr 6, 2004 12:04 PM EST)
  • Story Type: News Story
Despite having pockets of communities spread across the country, open source software (OSS) has no future in the country's budding software development business, according to a software development expert. "The software development industry in the Philippines will always choose commercial applications over open source applications, unless the open source community comes around and becomes serious in turning open source software into a serious business," said Joey Gurango, CEO of software development firm Webworks OS.

Gentoo alert: Tcpdump Vulnerabilities in ISAKMP Parsing

  • Mailing list; By "Joshua J. Berry" <condordes@gentoo.org> (Posted by dave on Apr 6, 2004 11:35 AM EST)
  • Story Type: Security Alert; Groups: Gentoo
There are multiple vulnerabilities in tcpdump and libpcap related to parsing of ISAKMP packets.

Desktop Guerrilla Tactics: a Portable Thin Client Approach

  • Linux Journal (Posted by dave on Apr 6, 2004 10:48 AM EST)
  • Story Type: News Story
Roll out a desktop Linux pilot project quickly without disturbing the legacy desktop OS.

Sitting for the RHCE

I've taken some pretty tough tests in my life, and passed every one of them on the first try. And since I'm teaching Linux system administration at my local community college, I thought I would be hot stuff when I signed up to take the Red Hat Certified Engineer (RHCE) exam. I don't think that way anymore.

Microsoft: Open source not cheaper

  • InfoWorld: Platforms; By Paul Krill (Posted by dave on Apr 6, 2004 10:12 AM EST)
  • Story Type: News Story; Groups: Microsoft
By selling software through the traditional commercial model, Microsoft has been seen in some circles as the odd man out when it comes to the popular open source movement. But the company argues that it has a place in the open source model and that open source does not necessarily mean less expensive than Windows. At the recent Open Source Business Conference, InfoWorld Editor at Large Paul Krill met with Jason Matusow, manager of Microsoft’s Shared Source Initiative program, to discuss Shared Source, Linux, and Windows.

Replacing DHTML Menus with XUL

  • mozillaZine; By Nigel McFarlane (Posted by dave on Apr 6, 2004 9:49 AM EST)
  • Story Type: News Story
Nigel McFarlane writes in with news about his latest article on using XUL rather than DHTML to create Web page menus: "I've written another article highlighting the features of Mozilla. To the best of my knowledge this is the first 'dirty XUL trick' that might appeal to web developers. It's nice to see that the Mozilla styling and layout systems are robust enough to support this kind of fiddling. It would be wonderful to see a full Web toolkit of XBL objects spring up to replace the junk we do in Dynamic HTML."

Linux on IPod: 2.4.24 Kernel Available

Just over a year ago, the Linux on IPod site went live, and judging by the half-a million page views and over two thousand downloads, interest is still strong. According to the site's question and answer page, right now the project is focused on porting the uClinux kernel to the iPod.

Debian alert: New xine-ui packages fix insecure temporary file creation

  • Mailing list; By joey@infodrom.org (Martin Schulze) (Posted by dave on Apr 6, 2004 9:26 AM EST)
  • Story Type: Security Alert; Groups: Debian
Shaun Colley discovered a problem in xine-ui, the xine video player user interface. A script contained in the package to possibly remedy a problem or report a bug does not create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the user invoking xine.

Gentoo alert: KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability

  • Mailing list; By Aida Escriva-Sammer <aescriva@gentoo.org> (Posted by dave on Apr 6, 2004 9:26 AM EST)
  • Story Type: Security Alert; Groups: Gentoo
KDE-PIM may be vulnerable to a remote buffer overflow attack that may allow unauthorized access to an affected system.

Introduction to Enterprise Linux

What is Enterprise Linux? Who has it? What does it cost? Are there any viable free alternatives? These are all questions that this article will address and try to answer. Enterprise linux is being offered by the three major commercial linux distributions; RedHat [sic], SUSE and Mandrake. Here is what each says the purpose of it's enterprise product is.

Interview with two Ark Linux Development team members

  • DesktopOS.com; By Tim Mullins, Bernhard Rosenkraenzer, Zackary Deems (Posted by dave on Apr 6, 2004 8:57 AM EST)
  • Story Type: News Story
The following Interview was conducted by e-mail and IRC over the past few weeks. Questions by Tim Mullins, answers from Zackary Deems and Bernhard Rosenkraenzer who are two of the head developers in the Ark Linux Project.

Application of the Month: KSirtet

  • KDE Dot News (Posted by dave on Apr 6, 2004 8:32 AM EST)
  • Story Type: News Story; Groups: KDE
As part of the March 2004 issue of the "Application of the month" series on KDE.de, Andreas C. Diekmann has interviewed Nicolas Hadacek, author of KSirtet, a Tetris clone for KDE. The Dutch KDE website is offering an English translation of the interview as well as the overview of this issue.

Debian alert: New heimdal packages fix cross-realm vulnerability

  • Mailing list; By Matt Zimmerman <mdz@debian.org> (Posted by dave on Apr 6, 2004 7:31 AM EST)
  • Story Type: Security Alert; Groups: Debian
"a cross-realm vulnerability allowing someone with control over a realm to impersonate anyone in the cross-realm trust path."

LXer story count review: March, 2004

In March of 2004 we posted 726 stories (security alerts were not counted). Here are the biggest newsmakers of the month, along with the most interesting story posted about them during that time.

Gentoo alert: Insecure sandbox temporary lockfile vulnerabilities in Portage

  • Mailing list; By Tim Yamin <plasmaroo@gentoo.org> (Posted by dave on Apr 6, 2004 7:17 AM EST)
  • Story Type: Security Alert; Groups: Gentoo
A flaw has been found in the temporary file handling algorithms for the sandboxing code used within Portage. Lockfiles created during normal Portage operation of portage could be manipulated by local users resulting in the truncation of hard linked files; causing a Denial of Service attack on the system.

The Commercialization of Open Source

  • LinuxWorld.com (Posted by dave on Apr 6, 2004 6:44 AM EST)
  • Groups: JBoss; Story Type: News Story
We've all heard the news: JBoss has received $10 million in funding and now it's time to sit back and mull it over. Without a doubt this infusion of capital is a signal of confidence for JBoss Group. But is this investment a good thing for open source? Not an unimportant question for those of us who have decided to use open source in our enterprise applications.

Microsoft Releases Code to Open Source Community

  • Computer Business Review; By Gavin Clarke (Posted by dave on Apr 6, 2004 6:17 AM EST)
  • Story Type: News Story; Groups: Microsoft
Microsoft yesterday released the Windows Installer XML (WiX) toolkit under IBM Corp's Common Public License (CPL) to what is believed the industry's largest open source development community, SourceForge.

« Previous ( 1 ... 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 ... 2353 ) Next »