Fix Released for ISA Server
506946
Microsoft posted a patch on Tuesday afternoon for Internet Security &amp; Acceleration Server 2000 and Proxy Server 2.0. The patch fixed a spoofing vulnerability that Microsoft rated an &quot;important&quot; problem.
191229
A bug in Microsoft&#39;s Internet Security and Acceleration (ISA) Server 2000 and Proxy Server 2 can let hackers spoof Web content, such as a trusted site, with their own fake content, the Redmond
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
614738
Matt Wade has posted a quick item to APress' Inside Open Source blog today mentioning an update to an item he'd previously mentioned - issues with the Zend_Cache module.   One of my complaints was the Zend_Cache did not accept lifetimes on a per object basis, but rather the lifetime was at an application level. I just received notice in my inbox that the issue has been fixed! The change is currently in svn, and should be in the 0.80 preview release. Thanks go to Fabien for the fix.   You can download this latest version of the Framework (0.7.0) from the Zend Framework website.
11119
In what could be the quickest patch ever to be released by Microsoft, the company on Tuesday publicly issued a fix for the highly-publicized Vector Markup Language (VML) vulnerability that surfaced last week and was being actively exploited by numerous attacks.
294393
Security update to QuickTime 7.1.6 patches two issues with the way QuickTime interacts with Java.
763006
Update fixes crashes caused by incompatibility with hidden advertising app.
654138
Users urged to upgrade RealPlayer and Helix Player to repair critical security flaw.
718238
On his blog, Bill has posted about a patch for IIS7 running on a Windows Vista machine that corrects an issue with applications that send multiple response headers.   Today we released a patch for IIS7 in Windows Vista that addresses an issue we've seen with CGI applications (especially PHP applications that use the built-in CGI component).  The typical symptom is an application that runs using CGI and is unable to support multiple "cookies" for authentication or personalization.    He also links to the Microsoft Knowledge Base article on the topic and to the download for the patch.
557177
Aspyr Media has posted an incremental update that squashes bugs, smooths play.
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
184682
Microsoft has issued a formal fix for a problem in Windows XP Service Pack 2 that appeared almost immediately after the update&#39;s release.
347931
A fix for a serious flaw in Microsoft's Internet Explorer has been released early to combat escalating attacks.
424439
10.3.7 fixes bugs, fills security holes
753031
On the PHP Security Blog, there's two new posts concerning their Suhosin patch for PHP - one talking about a remote code execution vulnerability found in the uploadprogressmeter extension (which as already been corrected) and the other dealing with the "stealth mode" of the patch to find compatibility problems.   As mentioned, the issue with the uploadprogress extension has been fixed and as been introduced into the PECL repository. The other post just mentions what the patch is doing to try to keep compatibility problems from happening due to back extensions and/or modules being loaded in an application.   More details about the Suhosin patch can be found here.
763575
Ilia Alshanetsky posts today about the proposed "Month of PHP bugs" that Stefan Esser is proposing:   It would be interesting to see what issues he discovers, hopefully most of them have already been reported to the PHP Security Team, in which case the upcoming 5.2.1 release will provide a resolution path for affected users.   Hopefully, as Ilia states, the bugs will not turn out to be zero-day vulnerabilities and will instead be smaller issues. Either way, a bug-fix patch will probably soon follow.   Either way, I have to look at this as a free security audit of PHP by someone with a clue about security and ultimately, in the long run it will only make PHP better, even if March is going to be rather busy.
196081
Latest PEAR Releases:File_Cabinet 0.1.0Validate_IE 1.0.0Net_SMTP 1.2.11pearweb_phars 1.4.1PHP_CompatInfo 1.6.0PHP_CompatInfo 1.6.1VFS 0.2.0Structures_DataGrid_DataSource_Array 0.1.4Services_OpenSearch 0.2.0