|
ru.linux
- RU.LINUX ---------------------------------------------------------------------
From : Sergey Lentsov 2:4615/71.10 30 May 2002 16:15:20
To : All
Subject : URL: http://www.lwn.net/2002/0523/security.php3
--------------------------------------------------------------------------------
[1][LWN Logo]
[LWN.net]
Sections:
[2]Main page
Security
[3]Kernel
[4]Distributions
[5]Development
[6]Commerce
[7]Linux in the news
[8]Announcements
[9]Letters
[10]All in one big page
See also: [11]last week's Security page.
Security
News and Editorials
Legacy, security-free protocols: goodbye rlogind (OpenBSD Journal).
[12]OpenBSD Journal reports that rlogind and rexecd have been removed
from OpenBSD. "Hopefully other operating systems and software vendors
will take note and cease having installation or runtime dependencies
on r* programs." We certainly agree. Verifying that rlogin and telnet
are disabled has been part of securing a Linux installation for as
long as your editor can recall.
CRYPTO-GRAM newsletter. Here is [13]Bruce Schneier's CRYPTO-GRAM
newsletter for May. It looks at Kerckhoffs' Principle (no security
through obscurity) and a technique for fooling fingerprint scanners
with fake fingers made of gelatin. "Gummy fingers can even fool
sensors being watched by guards. Simply form the clear gelatin finger
over your own. This lets you hide it as you press your own finger onto
the sensor. After it lets you in, eat the evidence."
International Developers Finger Biometrics as Most Effective User
Authentication Method. In contrast to Bruce Schneier's comments
(above), Evans Data Corporation has [14]announced the results of the
Evans Data Spring 2002 International Developers Survey. "The Evans
Data Corp. survey of more than 400 programmers working outside North
America found that biometric solutions generally -- and signatures and
fingerprint identification specifically -- have the strongest backing
among developers seeking tools to help keep computer networks free
from unwanted intrusions and other security breaches."
OpenSSH 3.2.2 released. The [15]OpenSSH developers have released
[16]OpenSSH 3.2.2. Security fixes and other changes are available in
this release.
Mailman 2.0.11 released. Mailman 2.0.11 has been [17]announced. There
are fixes for a couple of cross-site scripting vulnerabilities in this
release, so an upgrade is recommended.
Security Reports
Remotely-exploitable vulnerability in fetchmail. Unpatched versions of
fetchmail prior to 5.9.10 have a remotely-exploitable buffer overflow
problem.
Updates which fix the problem have been released by:
* [18]Eridani (May 22, 2002)
* [19]Red Hat (May 20, 2002) (Red Hat 6.2, 7, 7.1, 7.2, and 7.3)
SuSE alert for shadow/pam-modules. A security announcement has been
released by SuSE for [20]shadow/pam-modules. "The shadow package
contains several useful programs to maintain the entries in the
/etc/passwd and /etc/shadow files. The SuSE Security Team discovered a
vulnerability that allows local attackers to destroy the contents of
these files or to extend the group privileges of certain users."
Caldera security update to imapd. Caldera International has issued
[21]a security update to imapd fixing a buffer overflow vulnerability
in that package.
Red Hat updates for mpg321. Red Hat has issued an update for
[22]mpg321 that fixes a network streaming buffer overflow bug.
SuSE alert for lukemftp. SuSE has issued a security alert for the
[23]lukemftp,, ftp client. "A buffer overflow could be triggered by an
malicious ftp server while the client parses the PASV ftp command. An
attacker who control an ftp server to which a client using lukemftp is
connected can gain remote access to the clients machine with the
privileges of the user running lukeftp. [...] The lukemftp RPM package
is installed by default."
ViewCVS cross site scripting vulnerability The [24]problem exists in
[25]ViewCVS version 0.9.2 and under. The [26]ViewCVS team is working
on a fix. "ViewCVS is a WWW interface for CVS Repositories."
web scripts.
The following web scripts were reported to contain vulnerabilities:
* Phorum 3.3.2a has a remote command execution vulnerability which
is fixed in the May 16, 2002 release of [27]Phorum 3.3.2b3.
"Phorum is an OpenSource web based discussion software application
written in PHP."
Proprietary products.
The following proprietary products were reported to contain
vulnerabilities:
* Steve Gustin [28]reported path disclosure vulnerabilities in more
than fourteen scripts available from [29]CGIScript.net including
csBanner.cgi and CSMailto.cgi.
Updates
DHCP remotely exploitable format string vulnerability. The May 8, 2000
release of [30]ISC DHCP 3.0p1 fixes this [31]serious vulnerability in
ISC DHCPD 3.0 to 3.0.1rc8 inclusive.
We encourage dhcp users to upgrade, disable dhcp or, at a minimum,
consider using ingress filtering as described in the [32]CERT
advisory. (First LWN report: [33]May 16).
Note: Distributions which use version 2 of ISC DHCP, such as Red Hat
Linux, are not vulnerable.
This week's updates:
* [34]SuSE (May 22, 2002) .
Previous updates:
* [35]Slackware-current (May 9, 2002)
* [36]Conectiva (May 9, 2002)
GNU fileutils race condition. A [37]race condition in rm may cause the
root user to delete the whole filesystem. The problem exists in the
version of rm in fileutils 4.1 stable and 4.1.6 development version. A
[38]patch is available. (First LWN report: [39]May 2).
This week's updates:
* [40]Mandrake (May 16, 2002)
Previous updates:
* [41]Caldera (May 13, 2002) (revision to the April 26th advisory)
* [42]SuSE (April 8, 2002) (see the note under Pending
vulnerabilities, fileutils)
Problem loading untrusted images in imlib. Versions of imlib prior to
1.9.13 used the NetPBM package in ways which "make it possible for
attackers to create image files such that when loaded via software
which uses Imlib, could crash the program or potentially allow
arbitrary code to be executed." (First LWN report: [43]March 28).
This week's updates:
* [44]Eridani (May 18, 2002) (Update to the March 27th announcement)
* [45]Red Hat (May 16, 2002) (Update to the March 20th advisory))
Previous updates:
* [46]Caldera (April 29, 2002)
* [47]Conectiva (March 28, 2002)
* [48]Eridani (March 27, 2002)
* [49]Mandrake (April 25, 2002)
* [50]Red Hat (March 20, 2002)
* [51]SuSE (May 7, 2002)
Mozilla XMLHttpRequest file disclosure vulnerability. This
[52]XMLHttpRequest security bug impacts all Mozilla-based browsers.
"The bug is found in versions of Mozilla from 0.9.7 to 0.9.9 on
various operating system platforms, and in Netscape versions 6.1 and
higher." (First LWN report: [53]May 2).
This week's updates:
* [54]Red Hat (May 13, 2002)
Previous updates:
* The fix is in Mozilla 1.0 branch [55]nightly builds dated 2 May
2002 or later.
ZDNet also [56]covered the vulnerability with a focus on its presence
in Netscape.
Buffer overflow in OpenSSH's sshd. According to [57]the advisory, it
could be remotely exploitable, but only under a set of relatively rare
conditions: "AFS has been configured on the system or if
KerberosTgtPassing or AFSTokenPassing has been enabled in the
sshd_config file. Ticket and token passing is not enabled by default."
(First LWN report: [58]April 25).
The problem is fixed in the [59]OpenSSH 3.2.2 release.
This week's updates:
* [60]Caldera (May 15, 2002)
Previous updates:
* [61]Trustix (April 29, 2002)
Both PHP3 and PHP4 [62]have vulnerabilities in their file upload code
which can lead to remote command execution. This one could be ugly;
sites using PHP should apply updates at the first opportunity. If an
update isn't available for your distribution, users of PHP 4.0.3 and
later are encouraged to consider disabling file upload support by
adding this directive to php.ini:
file_uploads = Off
CERT has [63]issued this advisory on the problem. [64]This article in
the Register also talks about the vulnerability. (First LWN report:
[65]March 7).
Developers using the 4.2.0 branch, are not vulnerable because because
file upload support was completely rewritten for that branch.
This week's updates:
* [66]Caldera (May 16, 2002)
Previous updates:
* [67]Conectiva (March 8, 2002)
* [68]Debian (March 2, 2002)
* [69]EnGarde (March 1, 2002)
* [70]Eridani (March 5, 2002)
* [71]Mandrake (February 28, 2002)
* [72]Mitel Networks (March 7, 2002) (SME Server)
* [73]OpenPKG (February 28, 2002)
* [74]Red Hat (March 21, 2002)
* [75]Slackware (March 5, 2002)
* [76]SuSE (February 28, 2002)
* [77]Trustix (April 29, 2002) (The [78]February 28th update "did
not quite do the trick")
* [79]Trustix (February 28, 2002)
* [80]Yellow Dog (March 5, 2002)
Update: Despite [81]some concern expressed in an earlier report by
LWN, these updates do, in fact, fix the problem. The original update
from the php team fixes the security hole but introduces a "rare
segfault condition" that is not a security problem.
Sharutils potential privilege escalation using uudecode. According to
the [82]CVE entry, "uudecode, as available in the sharutils package
before 4.2.1, does not check whether the filename of the uudecoded
file is a pipe or symbolic link, which could allow attackers to
overwrite files or execute commands ." (First LWN report: [83]May 16).
This week's updates:
* [84]Eridani (May 16, 2002)
Previous updates:
* [85]Red Hat (May 14, 2002)
Multiple vulnerabilities in tcpdump. Version 3.5.2 fixed a buffer
overflow vulnerability in all prior versions. However, newer versions,
including 3.6.2, are vulnerable to another buffer overflow in the AFS
RPC functions that was reported by Nick Cleaton. (First LWN report:
[86]May 9).
Both problems appear to have been reported and fixed in FreeBSD some
months ago. The [87]CIAC report on the vulnerability in versions prior
to 3.5.2 is dated October 31, 2000. Nick Cleaton's [88]FreeBSD
security advisory on the AFS RPC bug, and reference to a fix for
FreeBSD, is dated July, 17, 2001. [89]Tcpdump 3.7 was released on
January 21, 2002.
This week's updates:
* [90]Mandrake (May 16, 2002) (tcpdump 3.6.2)
Previous updates:
* [91]Debian (November 20, 2000) (fixed in tcpdump 3.4)
* [92]Red Hat (February 12, 2002) (tcpdump 3.6.2 - advisory first
issued June 28, 2001)
* [93]Conectiva (May 7, 2002) (tcpdump 3.6.2)
Webmin/Usermin vulnerabilities. [94]Webmin is a web-based interface
for system administration for Unix. Webmin has [95]cross-site
scripting and [96]session ID spoofing vulnerabilities which are fixed
in the May 6, 2002 [97]release of [98]version 0.970. (First LWN
report: [99]May 9).
This one is scary. The [100]session ID spoofing vulnerability allows
the "possibility that arbitrary commands may be executed with root
privileges." Upgrading is strongly recommended. At a minimum avoid the
"preconditions for a successful exploit" by disabeling password
timeouts under Webmin->Configuration->Authentication.
This week's updates:
* [101]Mandrake (May 21, 2002)
Resources
Linux security week. The [102]Linux Security Week and [103]Linux
Advisory Watch publications from LinuxSecurity.com are available.
Cross Site Scripting FAQ. [104]Cgisecurity.com has published [105]The
Cross Site Scripting FAQ "which covers frequently asked questions in
relation to Cross Site Scripting Attacks."
Events
Upcoming Security Events.
Canadian Security & Intelligence Conference for 2002 [106]announced.
[107]CSICON will be held August 19-21, 2002 at the Hyatt Regency,
Calgary, Alberta Canada. "
This is a technical security conference aimed at IT Professionals, and
IT Security Managers. Enjoy three days filled with presentations and
discussions around IT Security issues free of vendor pitches."
ICICS 2002 [108]call for papers. The 4th [109]International Conference
on Information and Communications Security will be held December 9-12,
2002 in Singapore. "Original papers on all aspects of information and
communications security are solicited for submission. The proceedings
of ICICS'02 will be published in Springer-Verlag's Lecture Notes in
Computer Science series."
Date Event Location
May 27 - 31, 2002 [110]3rd International SANE Conference(SANE 2002)
Maastricht, The Netherlands
May 29 - 30, 2002 [111]RSA Conference 2002 Japan (Akasaka Prince
Hotel)Tokyo, Japan
May 31 - June 1, 2002 [112]SummerCon 2002 (Renaissance
Hotel)Washington D.C., USA
June 17 - 19, 2002 [113]NetSec 2002 San Fransisco, California, USA
June 24 - 28, 2002 [114]14th Annual Computer Security Incident
Handling Conference (Hilton Waikoloa Village)Hawaii
June 24 - 26, 2002 [115]15th IEEE Computer Security Foundations
Workshop (Keltic Lodge, Cape Breton)Nova Scotia, Canada
June 28 - 29, 2002 [116]Edinburgh Financial Cryptography Engineering
2002 Edinburgh, Scotland
For additional security-related events, included training courses
(which we don't list above) and events further in the future, check
out Security Focus' [117]calendar, one of the primary resources we use
for building the above list. To submit an event directly to us, please
send a plain-text message to [118]lwn@lwn.net.
Section Editor: [119]Dennis Tenney
May 23, 2002
Sponsored Link
[120]Cheap and Effective
LWN's text ads are a cheap and effective marketing tool for your
organization. You can now purchase text ads automatically through our
own credit card gateway. (No more PayPal).
LWN Resources
[121]Security alerts archive
Secured Distributions:
[122]Astaro Security
[123]Castle
[124]Engarde Secure Linux
[125]Immunix
[126]Kaladix Linux
[127]NSA Security Enhanced
[128]Openwall GNU/Linux
[129]Trustix
Security Projects
[130]Bastille
[131]Linux Security Audit Project
[132]Linux Security Module
[133]OpenSSH
Security List Archives
[134]Bugtraq Archive
[135]Firewall Wizards Archive
[136]ISN Archive
Distribution-specific links
[137]Caldera Advisories
[138]Conectiva Updates
[139]Debian Alerts
[140]Kondara Advisories
[141]Esware Alerts
[142]LinuxPPC Security Updates
[143]Mandrake Updates
[144]Red Hat Errata
[145]SuSE Announcements
[146]Turbolinux
[147]Yellow Dog Errata
BSD-specific links
[148]BSDi
[149]FreeBSD
[150]NetBSD
[151]OpenBSD
Security mailing lists
[152]Caldera
[153]Cobalt
[154]Conectiva
[155]Debian
[156]Esware
[157]FreeBSD
[158]Kondara
[159]LASER5
[160]Linux From Scratch
[161]Linux-Mandrake
[162]NetBSD
[163]OpenBSD
[164]Red Hat
[165]Slackware
[166]Stampede
[167]SuSE
[168]Trustix
[169]turboLinux
[170]Yellow Dog
Security Software Archives
[171]munitions
[172]ZedZ.net (formerly replay.com)
Miscellaneous Resources
[173]CERT
[174]CIAC
[175]Comp Sec News Daily
[176]Crypto-GRAM
[177]LinuxLock.org
[178]LinuxSecurity.com
[179]Security Focus
[180]SecurityPortal
[181]Next: Kernel
[182]Eklektix, Inc. Linux powered! Copyright Л 2002 [183]Eklektix,
Inc., all rights reserved
Linux (R) is a registered trademark of Linus Torvalds
References
1. http://lwn.net/
2. http://lwn.net/2002/0523/
3. http://lwn.net/2002/0523/kernel.php3
4. http://lwn.net/2002/0523/dists.php3
5. http://lwn.net/2002/0523/devel.php3
6. http://lwn.net/2002/0523/commerce.php3
7. http://lwn.net/2002/0523/press.php3
8. http://lwn.net/2002/0523/announce.php3
9. http://lwn.net/2002/0523/letters.php3
10. http://lwn.net/2002/0523/bigpage.php3
11. http://lwn.net/2002/0516/security.php3
12. http://www.deadly.org/article.php3?sid=20020514010017
13. http://lwn.net/2002/0523/a/crypto-gram.php3
14. http://www.businesswire.com/cgi-bin/f_headline.cgi?bw.052202/221420079
15. http://www.openssh.com/
16. http://lwn.net/2002/0523/a/openssh322.php3
17. http://lwn.net/2002/0523/a/mailman.php3
18. http://lwn.net/alerts/Eridani/ERISA-2002:016.php3
19. http://lwn.net/alerts/RedHat/RHSA-2002:047-10.php3
20. http://lwn.net/alerts/SuSE/SuSE-SA:2002:017.php3
21. http://lwn.net/alerts/Caldera/CSSA-2002-021.0.php3
22. http://lwn.net/alerts/RedHat/RHSA-2002:078-04.php3
23. http://lwn.net/alerts/SuSE/SuSE-SA:2002:018.php3
24. http://lwn.net/2002/0523/a/viewcvs.php3
25. http://viewcvs.sourceforge.net/
26. http://viewcvs.sourceforge.net/
27. http://www.phorum.org/
28. http://lwn.net/2002/0523/a/cgscript.php3
29. http://www.cgiscript.net/
30. http://www.isc.org/
31. http://www.cert.org/advisories/CA-2002-12.html
32. http://www.cert.org/advisories/CA-2002-12.html
33. http://lwn.net/2002/0516/security.php3#dhcpd
34. http://lwn.net/alerts/SuSE/SuSE-SA:2002:019.php3
35. ftp://ftp.slackware.com/pub/slackware/slackware-current/ChangeLog.txt
36. http://lwn.net/alerts/Conectiva/CLA-2002:483.php3
37. http://mail.gnu.org/pipermail/bug-fileutils/2002-March/002433.html
38. http://mail.gnu.org/pipermail/bug-fileutils/2002-March/002440.html
39. http://lwn.net/2002/0502/security.php3#fileutils
40. http://lwn.net/alerts/Mandrake/MDKSA-2002:031.php3
41. http://lwn.net/alerts/Caldera/CSSA-2002-018.1.php3
42. http://lwn.net/alerts/SuSE/SuSE-SA:2002:012.php3
43. http://lwn.net/2002/0328/security.php3#imlib
44. http://lwn.net/alerts/Eridani/ERISA-2002:015.php3
45. http://lwn.net/alerts/RedHat/RHSA-2002:048-14.php3
46. http://lwn.net/alerts/Caldera/CSSA-2002-019.0.php3
47. http://lwn.net/alerts/Conectiva/CLA-2002:470.php3
48. http://lwn.net/alerts/Eridani/ERISA-2002:011.php3
49. http://lwn.net/alerts/Mandrake/MDKSA-2002:029.php3
50. http://lwn.net/alerts/RedHat/RHSA-2002:048-06.php3
51. http://lwn.net/alerts/SuSE/SuSE-SA:2002:015.php3
52. http://sec.greymagic.com/adv/gm001-ns/
53. http://lwn.net/2002/0502/security.php3#mozilla
54. http://lwn.net/alerts/RedHat/RHSA-2002:079-13.php3
55. http://ftp.mozilla.org/pub/mozilla/nightly/latest-1.0.0/
56. http://zdnet.com.com/2100-1104-896099.html
57. http://lwn.net/2002/0502/a/openssh-rev2.php3
58. http://lwn.net/2002/0425/security.php3#openssh
59. http://lwn.net/2002/0523/a/openssh322.php3
60. http://lwn.net/alerts/Caldera/CSSA-2002-022.0.php3
61. http://lwn.net/alerts/Trustix/2002-0047.php3
62. http://lwn.net/2002/0307/a/php-upload.php3
63. http://lwn.net/2002/0307/a/cert-php.php3
64. http://www.theregister.co.uk/content/55/24248.html
65. http://lwn.net/2002/0307/security.php3#php
66. http://lwn.net/alerts/Caldera/CSSA-2002-023.0.php3
67. http://lwn.net/alerts/Conectiva/CLA-2002:468.php3
68. http://lwn.net/alerts/Debian/DSA-115-1.php3
69. http://lwn.net/alerts/EnGarde/ESA-20020301-006.php3
70. http://lwn.net/2002/0307/a/el-squid-php.php3
71. http://lwn.net/alerts/Mandrake/MDKSA-2002:017.php3
72. http://www.e-smith.org/article.php3?sid=58&mode=threaded&order=0
73. http://www.openpkg.org/security/OpenPKG-SA-2002.001-php.html
74. http://lwn.net/alerts/RedHat/RHSA-2002:035-18.php3
75. http://lwn.net/alerts/Slackware/sl-1015349340.php3
76. http://lwn.net/alerts/SuSE/SuSE-SA:2002:007.php3
77. http://lwn.net/alerts/Trustix/2002-0042.php3
78. http://lwn.net/alerts/Trustix/2002-0033.php3
79. http://lwn.net/alerts/Trustix/2002-0033.php3
80. http://lwn.net/alerts/YellowDog/YDU-20020305-1.php3
81. http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=60523
82. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0178
83. http://lwn.net/2002/0516/security.php3#sharutils
84. http://lwn.net/alerts/Eridani/ERISA-2002:014.php3
85. http://lwn.net/alerts/RedHat/RHSA-2002:065-13.php3
86. http://lwn.net/2002/0509/security.php3#tcpdump
87. http://www.ciac.org/ciac/bulletins/l-015.shtml
88.
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:48.tcpdump.asc
89. http://www.tcpdump.org/
90. http://lwn.net/alerts/Mandrake/MDKSA-2002:032.php3
91. http://www.debian.org/security/2000/20001120a
92. http://lwn.net/alerts/RedHat/RHSA-2001:089-08.php3
93. http://lwn.net/alerts/Conectiva/CLA-2002:480.php3
94. http://www.webmin.com/
95. http://lwn.net/2002/0509/a/webmincss.php3
96. http://lwn.net/2002/0509/a/webminspoof.php3
97. http://www.geocrawler.com/lists/3/SourceForge/12082/0/8595354/
98. http://www.webmin.com/download.html
99. http://lwn.net/2002/0509/security.php3#webmin
100. http://lwn.net/2002/0509/a/webminspoof.php3
101. http://lwn.net/alerts/Mandrake/MDKSA-2002:033.php3
102. http://lwn.net/2002/0523/a/security-week.php3
103. http://lwn.net/2002/0523/a/advisory-watch.php3
104. http://cgisecurity.com/
105. http://www.cgisecurity.com/articles/xss-faq.shtml
106. http://lwn.net/2002/0523/a/csicon.php3
107. http://www.csicon.net/
108. http://lwn.net/2002/0523/a/icics.php3
109. http://icisa.freewebtools.com/icics.html
110. http://www.nluug.nl/sane/
111. http://www.rsaconference.net/
112. http://www.summercon.org/
113. http://www.gocsi.com/#netsec
114. http://www.first.org/conference/2002
115. http://www.csl.sri.com/programs/security/csfw/csfw15/csfw15.html
116. http://www.efce.net/
117. http://securityfocus.com/calendar
118. mailto:lwn@lwn.net
119. mailto:lwn@lwn.net
120.
http://oasis.lwn.net/oasisc.php?s=4&c=5&cb=71774970&url=http%3A%2F%2Flwn.net%2Fc
orp%2Fadvertise%2Ftext%2F
121. http://lwn.net/alerts/
122. http://www.astaro.com/products/index.html
123. http://castle.altlinux.ru/
124. http://www.engardelinux.org/
125. http://www.immunix.org/
126. http://www.kaladix.org/
127. http://www.nsa.gov/selinux/
128. http://www.openwall.com/Owl/
129. http://www.trustix.com/
130. http://www.bastille-linux.org/
131. http://lsap.org/
132. http://lsm.immunix.org/
133. http://www.openssh.com/
134. http://www.securityfocus.com/archive/1
135. http://www.nfr.net/firewall-wizards/
136. http://www.jammed.com/Lists/ISN/
137. http://www.calderasystems.com/support/security/
138. http://www.conectiva.com.br/atualizacoes/
139. http://www.debian.org/security/
140. http://www.kondara.org/errata/k12-security.html
141. http://www.esware.com/actualizaciones.html
142. http://linuxppc.org/security/advisories/
143. http://www.linux-mandrake.com/en/fupdates.php3
144. http://www.redhat.com/support/errata/index.html
145. http://www.suse.de/security/index.html
146. http://www.turbolinux.com/security/
147. http://www.yellowdoglinux.com/resources/
148. http://www.BSDI.COM/services/support/patches/
149. http://www.freebsd.org/security/security.html
150. http://www.NetBSD.ORG/Security/
151. http://www.openbsd.org/security.html
152. http://www.calderasystems.com/support/forums/announce.html
153. http://www.cobalt.com/support/resources/usergroups.html
154. http://distro.conectiva.com.br/atualizacoes/
155. http://www.debian.org/MailingLists/subscribe
156. http://www.esware.com/lista_correo.html
157. http://www.freebsd.org/handbook/eresources.html#ERESOURCES-MAIL
158. http://www.kondara.org/mailinglist.html.en
159. http://l5web.laser5.co.jp/ml/ml.html
160. http://www.linuxfromscratch.org/services/mailinglistinfo.php
161. http://www.linux-mandrake.com/en/flists.php3
162. http://www.netbsd.org/MailingLists/
163. http://www.openbsd.org/mail.html
164. http://www.redhat.com/mailing-lists/
165. http://www.slackware.com/lists/
166. http://www.stampede.org/mailinglists.php3
167. http://www.suse.com/en/support/mailinglists/index.html
168. http://www.trustix.net/support/
169. http://www.turbolinux.com/mailman/listinfo/tl-security-announce
170. http://lists.yellowdoglinux.com/ydl_updates.shtml
171. http://munitions.vipul.net/
172. http://www.zedz.net/
173. http://www.cert.org/nav/alerts.html
174. http://ciac.llnl.gov/ciac/
175. http://www.MountainWave.com/
176. http://www.counterpane.com/crypto-gram.html
177. http://linuxlock.org/
178. http://linuxsecurity.com/
179. http://www.securityfocus.com/
180. http://www.securityportal.com/
181. http://lwn.net/2002/0523/kernel.php3
182. http://www.eklektix.com/
183. http://www.eklektix.com/
--- ifmail v.2.14.os7-aks1
* Origin: Unknown (2:4615/71.10@fidonet)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
| Тема: |
Автор: |
Дата: |
|
URL: http://www.lwn.net/2002/0523/security.php3 |
Sergey Lentsov |
30 May 2002 16:15:20 |
|
|
