Microsoft releases password attack data

LinuxSecurity.com: This update corrects a problem with missing dependencies forthe ocsinventory-server package on perl-DBD-mysql, perl-Net-IP,perl-SOAP-Lite.

LinuxSecurity.com: This package adds new top bar for Mandriva Flash 2010 edition.

LinuxSecurity.com: According to a German IT service provider, users running 1&1 servers with openSUSE 11 as their distribution should check the version number of their Linux kernel. In order to guarantee full support for the hardware it uses, for openSUSE,

LinuxSecurity.com: mplayer would crash when selecting a chapter from the DVD menu. Thisupdate prevents the crash.

LinuxSecurity.com: Technology consultancy Detica today announced a new technology which could help internet service providers (ISPs) monitor illegal file sharing over the internet, but the firm was quick to point out that the system does not identify individual offenders.

LinuxSecurity.com: Maksymilian Arciemowicz discovered that PHP did not properly validatearguments to the dba_replace function. If a script passed untrusted inputto the dba_replace function, an attacker could truncate the database. Thisissue only applied to Ubuntu 6.06 LTS, 8.04 LTS, and 8.10.

LinuxSecurity.com: Mogeneration, an Australian software company, has hired the author of the first iPhone worm, Ashley Towns, to develop applications for the iPhone App Store. At the beginning of November, 21 year old Towns circulated the "Ikee" worm via Australian

LinuxSecurity.com: The organisers of the Hack In The Box security conferences in Malaysia are planning their first European show for Amsterdam next July. Hack In The Box (HITB) held its first security conference, or hacker convention, in Kuala Lumpur in

LinuxSecurity.com: Some vulnerabilities were discovered and corrected in bind:Unspecified vulnerability in ISC BIND 9.4 before 9.4.3-P4, 9.5before 9.5.2-P1, 9.6 before 9.6.1-P2, 9.7 beta before 9.7.0b3,and 9.0.x through 9.3.x with DNSSEC validation enabled and checkingdisabled (CD), allows remote attackers to conduct

LinuxSecurity.com: =3D=3D=3D=3D=3D=3D=3D=3DAn input sanitation error in PEAR Net_Traceroute might allow remoteattackers to execute arbitrary commands.

To spam or not to spam, it's all in the presentation. See if you can spot if this is a genuine email from Microsoft, or a semi-elaborate spam mesage. by Zack Whittaker

Kaspersky Lab announces Kaspersky Internet Security 2010 has received the Gold Zero-Day Protection Award from the Anti-Malware Test Lab