http://www.linuxsecurity.com – LinuxSecurity.com: Updated nss packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate [More...] (Security)

http://www.linuxsecurity.com – LinuxSecurity.com: It was discovered the Samba handled symlinks in an unexpected way when both"wide links" and "UNIX extensions" were enabled, which is the default. Aremote attacker could create symlinks and access arbitrary files from theserver. [More...] (Security)

http://www.armysurplus365.co.uk – Army surplus are goods and equipment that the military people use in excess. The military usually sold these materials or dispose when they no longer need it. These goods and commodities can be bought at surplus stores. In these items, we can include clothing such as trousers, jackets, footwear, equipment, headgear, camping and useful tools. (Security)

http://www.linuxsecurity.com – LinuxSecurity.com: Ivan Shmakov discovered that the htmlscrubber component of ikwiki, a wiki compiler, performs insufficient input sanitization on data:image/svg+xml URIs. As these can contain script code this can be used by an attacker to conduct cross-site scripting attacks. [More...] (Security)

http://www.linuxsecurity.com – LinuxSecurity.com: It was discovered that Audio File Library contained a heap-based bufferoverflow. If a user or automated system processed a crafted WAV file, anattacker could cause a denial of service via application crash, or possiblyexecute arbitrary code with the privileges of the user invoking theprogram. The default compiler options for Ubuntu should reduce this [More...] (Security)

http://www.linuxsecurity.com – LinuxSecurity.com: This update of OpenOffice_org includes fixes for the following vulnerabilities: - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow [More...] (Security)