ru.linux

 
 - RU.LINUX ---------------------------------------------------------------------
 From : Sergey Lentsov                       2:4615/71.10   01 Nov 2001  17:11:11
 To : All
 Subject : URL: http://www.lwn.net/2001/1101/security.php3
 -------------------------------------------------------------------------------- 
 

    [1][LWN Logo] 
    
                                [2]Click Here 
    [LWN.net]
    
    Sections:
     [3]Main page
     Security
     [4]Kernel
     [5]Distributions
     [6]Development
     [7]Commerce
     [8]Linux in the news
     [9]Announcements
     [10]Linux History
     [11]Letters
    [12]All in one big page
    
    See also: [13]last week's Security page.
    
 Security
 
 News and Editorials
 
    An ultra-secure network that actually works. O'Reilly's Andy Oram
    [14]looks at ANX, a secure network that uses internet protocols over
    leased lines as a solution to government security problems.
    
 Security Reports
 
    Mandrake 2.2 kernel security update. MandrakeSoft has issued a
    security update to its 2.2 kernel: [15]Mandrake (October 26, 2001) It
    fixes the recent security bugs there. (Mandrake's 2.4 kernel was
    updated a couple of weeks ago).
    
    SuSE security update to the kernel. Here is SuSE's kernel update:
    [16]SuSE (October 26, 2001) It fixes the recently-found security
    problems there. As always with kernel updates, read the instructions
    carefully - it's a relatively complicated upgrade.
    
 Updates
 
    OpenSSH restricted host vulnerability. Versions of OpenSSH prior to
    2.9.9 have a vulnerability that can allow logins from hosts which have
    been explicitly denied access. The fix is to upgrade to [17]OpenSSH
    2.9.9. This problem first appeared in [18]the October 4 LWN security
    page.
    
    This week's updates:
      * [19]Conectiva (October 24, 2001)
        
    Previous updates:
      * [20]Immunix (October 17, 2001)
      * [21]Red Hat (October 19, 2001) (Adds support for version 7.2).
      * [22]Mandrake (October 16, 2001)
      * [23]Red Hat (October 9, 2001)
      * [24]Trustix (October 17, 2001)
        
    Squid httpd acceleration ACL vulnerability. This vulnerability could
    result in unauthorized access to the squid server. See the [25]July 26
    Security page for details.
    
    This week's updates:
      * [26]SuSE (October 30, 2001)
        
    Previous updates:
      * [27]Red Hat (October 16, 2001) (adds an updated package for 7.2).
      * [28]Yellow Dog (July 25, 2001)
      * [29]Caldera (August 9)
      * [30]Linux-Mandrake (August 2)
      * [31]Immunix (July 26)
      * [32]Trustix (July 26)
      * [33]Red Hat (July 26)
        
    Uucp local user exploits. There is a vulnerability in the command-line
    argument handling of uucp which can be exploited by a local user to
    obtain uid/gid uucp. See [34]the September 13, 2001 LWN security page
    for the initial report.
    
    New updates:
      * [35]SuSE (October 31, 2001)
        
    Previous updates:
      * [36]Progeny (October 5, 2001)
      * [37]Caldera (September 7, 2001)
      * [38]Conectiva (September 11, 2001)
      * [39]Debian (September 24, 2001)
      * [40]Mandrake (September 21, 2001)
        
 Events
 
    Upcoming Security Events.
    Date Event Location
    November 5 - 8, 2001 [41]8th ACM Conference on Computer and
    Communication Security(CCS-8) Philadelphia, PA, USA
    November 13 - 15, 2001 [42]International Conference on Information and
    Communications Security(ICICS 2001) Xian, China
    November 19 - 22, 2001 [43]Black Hat Briefings Amsterdam
    November 21 - 23, 2001 [44]International Information Warfare Symposium
    AAL, Lucerne, Swizerland.
    November 24 - 30, 2001 [45]Computer Security Mexico Mexico City
    November 29 - 30, 2001 [46]International Cryptography Institute
    Washington, DC
    December 2 - 7, 2001 [47]Lisa 2001 15th Systems Administration
    Conference San Diego, CA.
    December 5 - 6, 2001 [48]InfoSecurity Conference & Exhibition Jacob K.
    Javits Center, New York, NY.
    December 10 - 14, 2001 [49]Annual Computer Security Applications
    Conference New Orleans, LA
    
    For additional security-related events, included training courses
    (which we don't list above) and events further in the future, check
    out Security Focus' [50]calendar, one of the primary resources we use
    for building the above list. To submit an event directly to us, please
    send a plain-text message to [51]lwn@lwn.net.
    
    Section Editor: [52]Forrest Cook
    November 1, 2001
    
                               [53]Click Here 
    LWN Resources
    [54]Security alerts archive
    Secured Distributions:
    [55]Astaro Security
    [56]Blue Linux
    [57]Castle
    [58]Engarde Secure Linux
    [59]Immunix
    [60]Kaladix Linux
    [61]NSA Security Enhanced
    [62]Openwall GNU/Linux
    [63]Trustix
    Security Projects
    [64]Bastille
    [65]Linux Security Audit Project
    [66]Linux Security Module
    [67]OpenSSH
    Security List Archives
    [68]Bugtraq Archive
    [69]Firewall Wizards Archive
    [70]ISN Archive
    Distribution-specific links
    [71]Caldera Advisories
    [72]Conectiva Updates
    [73]Debian Alerts
    [74]Kondara Advisories
    [75]Esware Alerts
    [76]LinuxPPC Security Updates
    [77]Mandrake Updates
    [78]Red Hat Errata
    [79]SuSE Announcements
    [80]Yellow Dog Errata
    BSD-specific links
    [81]BSDi
    [82]FreeBSD
    [83]NetBSD
    [84]OpenBSD
    Security mailing lists
    [85]Caldera
    [86]Cobalt
    [87]Conectiva
    [88]Debian
    [89]Esware
    [90]FreeBSD
    [91]Kondara
    [92]LASER5
    [93]Linux From Scratch
    [94]Linux-Mandrake
    [95]NetBSD
    [96]OpenBSD
    [97]Red Hat
    [98]Slackware
    [99]Stampede
    [100]SuSE
    [101]Trustix
    [102]turboLinux
    [103]Yellow Dog
    Security Software Archives
    [104]munitions
    [105]ZedZ.net (formerly replay.com)
    Miscellaneous Resources
    [106]CERT
    [107]CIAC
    [108]Comp Sec News Daily
    [109]Crypto-GRAM
    [110]LinuxLock.org
    [111]LinuxSecurity.com
    [112]Security Focus
    [113]SecurityPortal
    
    
                                                         [114]Next: Kernel
    
    [115]Eklektix, Inc. Linux powered! Copyright Л 2001 [116]Eklektix,
    Inc., all rights reserved
    Linux (R) is a registered trademark of Linus Torvalds
 
 References
 
    1. http://lwn.net/
    2. http://ads.tucows.com/click.ng/pageid=001-012-132-000-000-002-000-000-012
    3. http://lwn.net/2001/1101/
    4. http://lwn.net/2001/1101/kernel.php3
    5. http://lwn.net/2001/1101/dists.php3
    6. http://lwn.net/2001/1101/devel.php3
    7. http://lwn.net/2001/1101/commerce.php3
    8. http://lwn.net/2001/1101/press.php3
    9. http://lwn.net/2001/1101/announce.php3
   10. http://lwn.net/2001/1101/history.php3
   11. http://lwn.net/2001/1101/letters.php3
   12. http://lwn.net/2001/1101/bigpage.php3
   13. http://lwn.net/2001/1025/security.php3
   14. http://www.oreillynet.com/cs/weblog/view/wlg/792
   15. http://lwn.net/alerts/Mandrake/MDKSA-2001:082.php3
   16. http://lwn.net/alerts/SuSE/SuSE-SA:2001:036.php3
   17. http://lwn.net/2001/1004/a/openssh.php3
   18. http://lwn.net/2001/1004/security.php3#openssh
   19. http://lwn.net/alerts/Conectiva/CLA-2001:431.php3
   20. http://lwn.net/alerts/Immunix/IMNX-2001-70-034-01.php3
   21. http://lwn.net/alerts/RedHat/RHSA-2001:114-05.php3
   22. http://lwn.net/alerts/Mandrake/MDKSA-2001:081.php3
   23. http://lwn.net/alerts/RedHat/RHSA-2001:114-04.php3
   24. http://lwn.net/alerts/Trustix/2001-0023.php3
   25. http://lwn.net/2001/0726/security.php3#squid
   26. http://lwn.net/alerts/SuSE/SuSE-SA:2001:037.php3
   27. http://lwn.net/alerts/RedHat/RHSA-2001:113-03.php3
   28. http://lwn.net/alerts/YellowDog/YDU-20010725-14.php3
   29. http://lwn.net/2001/0809/a/caldera-squid.php3
   30. http://lwn.net/2001/0802/a/lm-squid.php3
   31. http://lwn.net/2001/0726/a/imm-squid.php3
   32. http://lwn.net/2001/0726/a/trustix-squid.php3
   33. http://lwn.net/2001/0726/a/rh-squid.php3
   34. http://lwn.net/2001/0913/security.php3#uucp
   35. http://lwn.net/alerts/SuSE/SuSE-SA:2001:38.php3
   36. http://lwn.net/alerts/Progeny/PROGENY-SA-2001-36.php3
   37. http://lwn.net/alerts/Caldera/CSSA-2001-033.0.php3
   38. http://lwn.net/alerts/Conectiva/CLA-2001:425.php3
   39. http://lwn.net/alerts/Debian/DSA-079-1.php3
   40. http://lwn.net/alerts/Mandrake/MDKSA-2001:078.php3
   41. http://www.bell-labs.com/user/reiter/ccs8/
   42. http://homex.coolconnect.com/member2/icisa/icics2001.html
   43. http://www.blackhat.com/
   44. http://www.sympinfowarfare.ch/
   45. http://www.seguridad2001.unam.mx/
   46. http://www.nipli.org/isse/events/2001/cryptography
   47. http://www.usenix.org/events/lisa2001/
   48. http://www.infosecurityevent.com/
   49. http://www.acsac.org/
   50. http://securityfocus.com/calendar
   51. mailto:lwn@lwn.net
   52. mailto:lwn@lwn.net
   53. http://ads.tucows.com/click.ng/buttonpos=lwnbuttonsecurity
   54. http://lwn.net/alerts/
   55. http://www.astaro.com/products/index.html
   56. http://bluelinux.sourceforge.net/
   57. http://castle.altlinux.ru/
   58. http://www.engardelinux.org/
   59. http://www.immunix.org/
   60. http://www.kaladix.org/
   61. http://www.nsa.gov/selinux/
   62. http://www.openwall.com/Owl/
   63. http://www.trustix.com/
   64. http://www.bastille-linux.org/
   65. http://lsap.org/
   66. http://lsm.immunix.org/
   67. http://www.openssh.com/
   68. http://www.securityfocus.com/bugtraq/archive/
   69. http://www.nfr.net/firewall-wizards/
   70. http://www.jammed.com/Lists/ISN/
   71. http://www.calderasystems.com/support/security/
   72. http://www.conectiva.com.br/atualizacoes/
   73. http://www.debian.org/security/
   74. http://www.kondara.org/errata/k12-security.html
   75. http://www.esware.com/actualizaciones.html
   76. http://linuxppc.org/security/advisories/
   77. http://www.linux-mandrake.com/en/fupdates.php3
   78. http://www.redhat.com/support/errata/index.html
   79. http://www.suse.de/security/index.html
   80. http://www.yellowdoglinux.com/resources/errata.shtml
   81. http://www.BSDI.COM/services/support/patches/
   82. http://www.freebsd.org/security/security.html
   83. http://www.NetBSD.ORG/Security/
   84. http://www.openbsd.org/security.html
   85. http://www.calderasystems.com/support/forums/announce.html
   86. http://www.cobalt.com/support/resources/usergroups.html
   87. http://distro.conectiva.com.br/atualizacoes/
   88. http://www.debian.org/MailingLists/subscribe
   89. http://www.esware.com/lista_correo.html
   90. http://www.freebsd.org/handbook/eresources.html#ERESOURCES-MAIL
   91. http://www.kondara.org/mailinglist.html.en
   92. http://l5web.laser5.co.jp/ml/ml.html
   93. http://www.linuxfromscratch.org/services/mailinglistinfo.php
   94. http://www.linux-mandrake.com/en/flists.php3
   95. http://www.netbsd.org/MailingLists/
   96. http://www.openbsd.org/mail.html
   97. http://www.redhat.com/mailing-lists/
   98. http://www.slackware.com/lists/
   99. http://www.stampede.org/mailinglists.php3
  100. http://www.suse.com/en/support/mailinglists/index.html
  101. http://www.trustix.net/support/
  102. http://www.turbolinux.com/mailman/listinfo/tl-security-announce
  103. http://lists.yellowdoglinux.com/ydl_updates.shtml
  104. http://munitions.vipul.net/
  105. http://www.zedz.net/
  106. http://www.cert.org/nav/alerts.html
  107. http://ciac.llnl.gov/ciac/
  108. http://www.MountainWave.com/
  109. http://www.counterpane.com/crypto-gram.html
  110. http://linuxlock.org/
  111. http://linuxsecurity.com/
  112. http://www.securityfocus.com/
  113. http://www.securityportal.com/
  114. http://lwn.net/2001/1101/kernel.php3
  115. http://www.eklektix.com/
  116. http://www.eklektix.com/
 
 --- ifmail v.2.14.os7-aks1
  * Origin: Unknown (2:4615/71.10@fidonet)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор