Blogs

Important: acpid security update

http://rhn.redhat.com/errata/RHSA-2009-1642.html

"An updated acpid package that fixes one security issue is now available
for Red Hat Enterprise Linux 5."

"Before applying this update, make sure that all previously-released
errata relevant to your system have been applied."

This flaw could lead to a local or compromised user to escalate privileges.

It is recommended to update this package.

Attack exploits just-patched Mac security bug - Java Runtime Environment (JRE)

http://www.theregister.co.uk/2009/12/04/mac_windows_java_attack/

A proof of concept (POC) has been released that targets unpatched
Macintosh systems.

"If you haven't installed the latest security update for Mac OS X, now
would be a good time."

This is related to the security alert sent out yesterday [NET #1379]:

Vulnerabilities in the Java Runtime Environment May Allow Privileges to be Escalated

http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1

"Multiple buffer and integer overflow vulnerabilities in the Java
Runtime Environment with processing audio and image files may allow an
untrusted applet or Java Web Start application to escalate privileges.
For example, an untrusted applet may grant itself permissions to read
and write local files or execute local applications that are accessible
to the user running the untrusted applet."

Vulnerabilities in the Java Runtime Environment May Allow Privileges to be Escalated

http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1

"Multiple buffer and integer overflow vulnerabilities in the Java
Runtime Environment with processing audio and image files may allow an
untrusted applet or Java Web Start application to escalate privileges.
For example, an untrusted applet may grant itself permissions to read
and write local files or execute local applications that are accessible
to the user running the untrusted applet."

Security Advisory for Adobe Flash Player (APSB09-19)

http://www.adobe.com/support/security/bulletins/apsb09-19.html

"Adobe is planning to release an update for Adobe Flash Player
10.0.32.18 and earlier versions, and an update to Adobe AIR 1.5.2 and
earlier versions, to resolve critical security issues. Adobe expects to
make these updates available on December 8, 2009."

Vulnerabilities in the Java Runtime Environment May Allow Privileges to be Escalated

http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1

"Multiple buffer and integer overflow vulnerabilities in the Java
Runtime Environment with processing audio and image files may allow an
untrusted applet or Java Web Start application to escalate privileges.
For example, an untrusted applet may grant itself permissions to read
and write local files or execute local applications that are accessible
to the user running the untrusted applet."

Security Advisory for Adobe Flash Player (APSB09-19)

http://www.adobe.com/support/security/bulletins/apsb09-19.html

"Adobe is planning to release an update for Adobe Flash Player
10.0.32.18 and earlier versions, and an update to Adobe AIR 1.5.2 and
earlier versions, to resolve critical security issues. Adobe expects to
make these updates available on December 8, 2009."

Privacy Changes for Facebook

http://www.net-security.org/secworld.php?id=8566

Facebook founder Mark Zuckerberg wrote an open letter describing some changes to the privacy of Facebook accounts (linked from above article).  It appears that regional networks are going to disappear, which may end up disclosing more information than you had intended.  He suggests that all Facebook users review their account privacy settings and update them accordingly.

Thanks,
ep

Pages