GeekTimeLinux

(Via Help Net Security – News.)

More holes have been picked in the security measure designed to protect the privacy and data of wi-fi users.

(Via linux news – Google News.)

(Via linux news – Google News.)

(Via LXer Linux News.)

Guess what, I can walk up to your Ubuntu, PCLinuxOS, Debian, etc desktop installation and take complete control over it without needing a single password. Thats right, root access simply by sitting down at your computer. Why is it nearly every single distro by default leaves this gaping security hole open?

(Via Help Net Security.)

SSL is especially suited for HTTP since it can provide some protection even if only one side of the communication is authenticated.

(Via LinuxSecurity.com – Security Advisories.)

LinuxSecurity.com: Joris van Rantwijk discovered that the Xen host did not correctly validate the contents of a Xen guests’s grug.conf file. Xen guest root users could exploit this to run arbitrary commands on the host when the guest system was rebooted.

(Via LinuxSecurity.com – Security Advisories.)

LinuxSecurity.com: It was discovered that a cross site scripting vulnerability in GForge, a collaborative development tool, allows remote attackers to inject arbitrary web script or HTML in the context of a logged in user’s session.

(Via LinuxSecurity.com – Security Advisories.)

LinuxSecurity.com: A flaw in how OpenSSL performed Montgomery multiplications was discovered %that could allow a local attacker to reconstruct RSA private keys by examining another user’s OpenSSL processes (CVE-2007-3108).

(Via LinuxSecurity.com – Security Advisories.)

LinuxSecurity.com: An integer overflow was discovered in the TIFF handling code in OpenOffice. If a user were tricked into loading a malicious TIFF image, a remote attacker could execute arbitrary code with user privileges.