Linux comes down with security flu

[Nomad559]

Linux comes down with security flu

Linux vendors are issuing patches for several serious bugs affecting an imaging component, a pdf viewer, two widely used media players and the Shoutcast audio server.

The bugs could leave Linux users vulnerable to attack when they view tiff images or pdf files, view remote media content or when the Shoutcast server accepts maliciously-crafted requests.

The LibTiff library, which supports tiff images in various Linux applications, is affected by two separate integer overflows, researchers said, in the "tiffFetchStripThing()" and "CheckMalloc()" functions. Both could allow an attacker to execute malicious code when a specially crafted tiff image is viewed in an application that uses the library.

http://secunia.com

[qnr]

1. Still trying, huh? The thing is, we KNOW, and fix immediately n/t

[ret5hd]

2. Exactly...

days (or even hours) instead of months or weeks...
true fixes instead of shutting services off or even fixes that are worse than the original problem...
etc etc etc

[billyskank]

3. I see it's the same guy who posted the thread about Firefox

Microsoft employee?

[Nomad559]

9. Microsoft employee?

No, I am not a Microsoft employee.

I post news articles on ALL operating systems and browsers, be It positive or negative.

Why Is it that the Linux, Mac or FireFox users always get annoyed with the negative news articles?

[mcscajun]

4. Well it looks like the Linux honeymoon is over...

...it's always the way. Popularity is what brings the hackers on.

[billyskank]

5. Crackers, please!

Or assholes, if you prefer. But not hackers. People who call themselves hackers are harmless.

BTW, Mozilla Firefox != Linux

[billyskank]

6. Oops

Wrong thread. Mozilla Firefox != Linux, but Linux == Linux! :dunce:

[mcscajun]

7. Oh...my mistake...

...I know the difference, too.

I just slip sometimes.

Then again...some who don't know the terminology might think we're talkin' about ill-bred racist, southern white folk when we say "crackers" and THEN where would we be? It's a tough call sometimes.

Assholes works very well though, and eliminates most risks. :)

[Commie Pinko Dirtbag]

8. In Free Software, the bugs are discovered and fixed BEFORE the exploits

That's one of the reasons (but far from being the only one) GNU/Linux & assorted software are more secure.