News: Beware of GTK+

green_man green_man at bluefrog.biz
Mon Sep 20 17:36:20 EDT 2004



Dave Andruczyk wrote, On 09/20/04 9:46 AM:

>the GTK+ people released a new release 2.4.10 on sept 18th, within 1 day of
>that article...  Now wouldn't it be nice if MS released a patch/fix for their
>(much more serious bugs) in IE/WinXP within that timeframe...  I guess if they
>did,  there wouldn't be as much interest in linux and other OS's
>  
>
On that page, click on the Linux and Open Source link.
Some where from there is an article about the futility of SP2 for Win XP.
SP2 plugs some holes they knew about before XP was even released. :-)
There's also some good Opinion pieces about WrongHorn if you hunt around.

>--- green_man <green_man at bluefrog.biz> wrote:
>
>  
>
>>eWeek News Story:
>>
>>[qoute]
>>Security
>>Code Flaws Open Linux Apps to Attack 
>>By Daniel Drew Turner
>>September 17, 2004
>>
>>
>>Vulnerabilities in code libraries that could potentially affect 
>>open-source programs using the GUI toolkit GTK+ were reported on the 
>>security Web site Secunia on Thursday. As initially discovered by Chris 
>>Evans, these problems could theoretically be exploited to spark a DDoS 
>>(distributed denial of service) attack and otherwise compromise a 
>>computer system.
>>[end quote]
>>
>>Note he said "theoretically".
>>The full story is here.
>>http://www.eweek.com/article2/0,1759,1647317,00.asp
>>
>>-- 
>>The sole purpose of my life is, apparently, to test my sanity. 
>>
>>Scott
>>Netscape 7.0 Mail
>>
>>
>>
>>    
>>
>
>
>=====
>Dave J. Andruczyk
>
>
>		
>__________________________________
>Do you Yahoo!?
>Yahoo! Mail - 50x more storage than other providers!
>http://promotions.yahoo.com/new_mail
>
>  
>

-- 
The sole purpose of my life is, apparently, to test my sanity. 

Scott
Netscape 7.0 Mail


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.nflug.org/pipermail/nflug/attachments/20040920/251a778b/attachment-0001.html


More information about the nflug mailing list