Vendors/Products - Page 38
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
A serious flaw in Apple's Snow Leopard OS appears capable of wiping user data after the user opens and closes the "guest" account on the afflicted Macintosh. According to reports, when the user first opens the guest account, closes it, and later logs back into their own account, their Home folder data has been erased.
The ClamAV developers have announced that the 15th of April 2010 will be the end-of-life (EOL) date for all versions up to 0.94.x of their free open source anti-virus program. The reason for the change is that releases older than 0.95 are affected by a bug in freshclam, the ClamAV utility used to download new virus definitions. The bug prevents incremental updates from working with signatures that are longer than 980 bytes. The developers note that they haven't yet released any signatures that exceed the limit.
Is this the same old concerns from a few years ago rising again? Companies are running scared of General Public Licence (GPL) software for fear of being sued, according to a leading open source enthusiast at Adobe. "A number of very large companies have rules to exclude GPL code," said Dave McAllister, director of standards and open source at Adobe.
The Apache HTTP Server Project developers have announced the availability of version 2.2.14 of their open-source HTTP server. According to the projects developers, the release is considered to be the "best available version of Apache HTTP Server". In addition to fixing bugs, Apache HTTP Server 2.2.14 addresses a number of security issues.
Mozilla on Wednesday posted preview builds of its Firefox browser with security enhancements designed to mitigate the risk of certain Web attacks. In a blog post, Brandon Sterne, security program manager for Mozilla, asks security researchers and server administrators to help test the changes by downloading a build appropriate for their operating system.
Google has pushed out a new version of its Chrome browser to fix a high-severity security hole that could lead to malicious code execution attacks.
The OpenBSD project has released version 5.3 of OpenSSH, the free implementation of the Secure Shell protocol (SSH). The main changes in OpenSSH are support for path names with more than 256 characters and that support for Windows 95/98/ME has been dropped.
Free software activist Richard Stallman has withdrawn an accusation that Apple's Mac OS X contained a backdoor after admitting there was no evidence to substantiate his earlier claims.
Seagate Technology LLC today announced it is shipping its Seagate self-encrypting drive (SED) across its portfolio of enterprise-class hard drives. The hard drives included with the self-encrypting option are the Savvio 15K.2, Savvio 10K.3, Constellation and Cheetah 15K.7 drives.
It turns out that Apple's iPhone 3.1 OS fix of a serious security issue, falsely reporting to Exchange servers that pre-3G S iPhones and iPod Touches had on-device encryption, wasn't the first such policy falsehood that Apple has quietly fixed in an OS upgrade. It fixed a similar lie in its June iPhone OS 3.0 update. Before that update, the iPhone falsely reported its adherence to VPN policies, specifically those that confirm the device is not saving the VPN password (so users are forced to enter it manually). Until the iPhone 3.0 OS update, users could save VPN passwords on their Apple devices, yet the iPhone OS would report to the VPN server that the passwords were not being saved.
Microsoft put 22 patents up for sale in July, listing them all as in the "open source" category, with some of them, "Linux-focused." The ultimate buyer was the Open Invention Network, a consortium of Linux backers that wanted to take them off the market.
Network security firm Check Point today launched a new version of its consumer security suite designed specifically to meet the increasingly sophisticated security needs of small and home business users.
Apple unveiled the latest update to its Mac OS X operating system on Friday, an early release that caught many software makers, including some significant security vendors, behind in their development schedule.
The release on Friday of Apple's Mac OS X 10.6, known as "Snow Leopard," has elicited criticism from security companies, which may have business to lose if Apple's latest operating system reduces interest in third-party security software.
Sun Microsystems' product plans are up in the air pending its acquisition by Oracle, but the company's chip engineers continue to present new designs in the hope they'll see the light of day.
A friend of mine suggested that I should include as boilerplate in my security stories, a line like: "Of course, if you were running desktop Linux or using a Mac, you wouldn't have this problem." She's got a point. Windows is now, always has been, and always will be insecure. Here's why.
Google has fixed two high-severity vulnerabilities in the stable version of its Chrome browser that could have let an attacker remotely take over a person's computer. With one attack on Google's V8 JavaScript engine, malicious JavaScript on a Web site could let an attacker gain access to sensitive data or run arbitrary code on the computer within a Chrome protected area called the sandbox, Google said in a blog post Tuesday.
Red Hat has finally managed to release a patch for the previously reported critical Linux kernel vulnerability. Red Hat's initial response was to provide a workaround for the problem that involved blacklisting certain network protocols, preventing the exploit from functioning. Novell has also released updates for openSUSE 10.3 to 11.1, SUSE Linux Enterprise Desktop and SUSE Linux Enterprise Server.
Torvalds has never really been a fan of the vendor-sec list. Vendor-sec is supposed to be a vendor only list that is not publicly available. It's supposed to ensure that vendors will have the time they need to make fixes.
RSA security, one of the top security firms in the country, has sent takedown notices to a blogger and his hosting company in an effort to silence his discussion of a vulnerability found on a bank web site that RSA helps monitor, according to the blogger.