CodeArmor Antipiracy Protection Gets Update
76936
Startup VI Labs has beefed up CodeArmor, which protects software against intellectual property theft.
642262
Adobe this week updated its Acrobat and Reader software to fix vulnerabilities spotted by security intelligence firm iDefense. Adobe this week updated its Acrobat and Reader software to fix vulnerabilities
753031
On the PHP Security Blog, there's two new posts concerning their Suhosin patch for PHP - one talking about a remote code execution vulnerability found in the uploadprogressmeter extension (which as already been corrected) and the other dealing with the "stealth mode" of the patch to find compatibility problems.   As mentioned, the issue with the uploadprogress extension has been fixed and as been introduced into the PECL repository. The other post just mentions what the patch is doing to try to keep compatibility problems from happening due to back extensions and/or modules being loaded in an application.   More details about the Suhosin patch can be found here.
763652
A security update will fix a problem that could allow an attacker to overwrite the contents of your computer's memory.
133485
Users are urged to download version 8.1.2, which fixes undisclosed vulnerabilities.
472946
An overnight update to CA's eTrust Antivirus signatures caused some mayhem for users when the software flagged a security-related process in Windows as malicious.
261826
PHP Magazine has posted their latest issue of the PHPBarnstormer (Issue #19):
698538
On Wednesday, Symantec released a beta of its new enterprise security product, Symantec Endpoint Protection 11.0, formerly codenamed Hamlet. The beta marks the company&#39;s most significant update to its enterprise security software in years.
686053
CA is seeking beta testers for the third generation of its Protection Suites lineup for small to medium-sized businesses. The products include antivirus, anti-spyware, backup and migration technology, with the new release adding desktop anti-spam and firewall options.
11292
Secunia has found that the number of security bugs in the open source Red Hat Linux operating system and Firefox browsers far outstripped comparable products from Microsoft last year.In a report released this week, Secunia also criticized CA for the quality of the code in its anti-virus products, saying that "inherent" code problems are exposing CA products to ongoing security vulnerabilities.On the other hand, "zero-day" security bugs in Firefox were patched more quickly than in Microsoft Internet Explorer, according to the Secunia 2007 Report, released this week.In a review of the number of vulnerabilities found in enterprise anti-virus vendors' products, Secunia found that CA was by far the leader, with 187 vulnerabilities, followed by Symantec with 73. Trend Micro (34), ClamAV (15), McAfee (13) and F-Secure (6) ranked lower on the list.The high figures for Symantec and CA are partly due to their wide range of products, some of which cover areas other than anti-virus, Secunia said.However, the majority of the CA bugs were due to "inherent code problems with some CA products", Secunia said in the report.Of particular concern is CA's range of ARCServe Backup products for laptops and desktops, which Secunia submitted to its Binary Analysis process after several bugs were reported and fixed. The bugs involved errors in processing particular arguments and requests.The analysis found that about 60 reported bugs were still present in the supposedly patched versions.What's more, the analysis found that the vulnerabilities were partly due to "the nature of the product code itself", Secunia said."Unless an overhaul of the code is undertaken, then the product remains susceptible to similar types of vulnerabilities," Secunia said.However CA said in a statement that it has rigorous quality-control measures in place for its software and continues to improve those measures.A number of the vulnerabilities found in Symantec products were due to their use of vulnerable software from third-party developers, Secunia said.One of these is the Autonomy Keyview SDK (software development kit), used in Symantec Mail to view Lotus 1-2-3 files. The component was reported to have a "highly critical" flaw on 12 December, but hasn't yet been patched, leaving some Symantec products vulnerable.Symantec said in a statement that it has published instructions for mitigating the problem and has issued product updates for some affected vendors. IBM, whose Lotus Notes was also affected by the Autonomy bug, has issued its own patch.Operating systems and browsersOut of the operating systems monitored by Secunia -- Windows (98 and onwards), Mac OS X, HP-UX 10.x and 11.x, Solaris 8, 9, and 10 and Red Hat (excluding Fedora) -- Red Hat was found to have by far the most vulnerabilities, at 633, with 99 percent found in third-party components. (Linux distributions are generally composed mostly of third-party software, which is integrated by the distributor.)Red Hat has taken issue with the figures, claiming the accurate number should be 404 vulnerabilities for last year.Solaris came next, with 252 bugs, 80 percent of which were in third-party components. Mac OS X came after that with 235, 62 percent of which were third-party.Windows had only 123 bugs reported, but 96 percent of those were found in the operating system itself. HP-UX had 75 bugs reported, 81 percent of which were in third-party code.Last week, a US Department of Homeland Security (DHS) bug-fixing scheme uncovered an average of one security glitch per 1,000 lines of code in 180 widely used open source software projects.The large number of Red Hat flaws is partly due to the large number and wide variety of components it includes."Red Hat contains two different browsers and graphic interfaces, a number of PDF readers and image editors, and so on," the report said. "Red Hat, HP-UX, and Solaris can easily be used as servers, and as such include and support a large number of third party components, while the same cannot be said of all versions of Windows and Mac OS X."Any consideration of relative OS security should look at factors not covered by the report, such as average patching time for vulnerabilities, Secunia said.In the browser field, Firefox led the way with 64 bugs, compared to 43 for Internet Explorer, and 14 each for Opera and Safari.However, in an examination of zero-day flaws - reported by third parties before a patch was available - Secunia found that Firefox tended to get more patches, sooner, compared to IE.Out of eight zero-day bugs reported for Firefox in 2007, five have been patched, three of those in just over a week. Out of 10 zero-day IE bugs, only three were patched and the shortest patch time was 85 days.ActiveX was hit by the largest number of browser add-on bugs in 2007, with 339 (compared to 45 last year), Secunia said.The figure was propped up by the Month of ActiveX Controls Bugs in May 2007, and by Secunia's discovery of a vulnerable ActiveX component that was used in 40 different products.QuickTime followed with 35 bugs and Java with 21 bugs.
112634
Update Slammed for touting unavailable but unlicensed content
240485
Even as the Big Four push to remove antipiracy software from digital downloads, larger issues remain. Don't expect a DRM-free world anytime soon.
92344
Blog: The most serious involves poisoned PDF files. The update also includes patches for Bind, Fetchmail, and GNU Screen.
124412
Earliest adopters of updated program should download again to ensure full security.
218854
Company first released update last fall, but is issuing it again to stress to users that they could be at risk if they don't follow through.
304159
Antony Dovgal has pointed out the updated packages that have been released to the snaps.php.net website by Derick Rethans.   He also includes a list of things that will be included in this upcoming release like:   Namespaces Late static binding Accessing static members through $foo::myFunc() Improved OpenSSL extension PCRE 7.4   Grab your copy of these latest snapshots from the snaps website and get to testing them on your system to see what happens before the release.
592989
(InfoWorld) - McAfee Inc. has apologized to users for bugs in the company's new line of client protection software, released last month. In an e-mail sent to some users last week, McAfee Executive Vice President Bill Kerrigan acknowledged that there had been glitches in the roll out. "We would like to extend our sincere apologies to anyone who may have had problems with their computers due to the upgrade," he wrote. Not all McAfee customers have been given the new software, which is going through a phased roll out, according to a McAfee spokeswoman. However, users who receive software updates from McAfee directly, or who purchased the software in the past month may have had problems, she said. Both McAfee and rival Symantec Corp. have been contending with Microsoft Corp.'s recent entry into the antivirus market, hoping to stay one step ahead of their new competitor. With this new line of products, code-named "Falcon," McAfee introduced a new user interface as well as its SiteAdvisor Web site-rating software. McAfee estimates that fewer than 1 percent of customers who downloaded the new software have had difficulties, but the problems they experienced could be annoying. The new software didn't work well with some ISP (Internet service provider) software, causing browsing slow-downs for some users, the company said. And customers who had disabled firewall protection would be presented with notification messages that could not be ignored, an annoyance for some. Some customers were simply confused by the new user interface, McAfee added. "While we believe no oneâs computer protection was compromised, we have worked quickly and hard to resolve the issues," Kerrigan said. "In fact, we have already sent out an update that automatically fixed the glitches caused by the upgrade." Customers who have complained about the bugs are being offered a free 3-month extension to their subscription, a McAfee spokeswoman said. The bugs made Web surfing a drag, said Matt Saefkow a programmer in Cleveland. "One out of every 10 images would not load unless I refreshed the page a number of times, " he said. "I was frustrated to the point where I no longer had any interest in trying to fix a program that should have helped my computer stay alive." Even before this latest update, Saefkow had experienced problems running FTP (File Transfer Protocol) and P-to-P (peer-to-peer) software on his PC, but the Web browsing bug was the last straw, he said. He has chronicled his difficulties with theÂ software on his blog. He now plans to remove the McAfee software and download a free product, which he hopes will be less of a drain on his PC. "When McAfee itself is causing a computer to feel like it's affected [by malicious software] that's counterproductive," Saefkow said. "I'm not going to be spending money on antivirus." Â