FreeBSD catches up with BIND update
After last week's disclosure of a major DNS vulnerability, many vendors began rolling out patches for their various implementations. FreeBSD has finally loosed a patch for its version of BIND, which closes up the hole that would allow an attacker to poison a DNS cache.
**********

Four new patches from Debian:

afuse (privilege escalation)

gaim (integer overflow, code execution)

lighttpd (multiple flaws)

mysql-dfsg-5.0 (authorization bypass)
**********

Three new updates from Mandriva:

pcre (buffer overflow, code execution)

poppler (code execution)

bluez (input validation, denial of service)
**********

Two new fixes from Gentoo:

Mercurial (directory traversal)

OpenOffice.org (integer overflow, code execution)
**********

Two new patches from rPath:

poppler (code execution)

Ruby (cross scripting)
**********

Today's malware news:

Hunt for the elusive rootkit 'Rustock.C' revealed
Rootkits are software code designed to hide from detection. So Kaspersky Lab's hunt for the elusive Rustock.C rootkit, rumored to exist for almost two years, reads like a detective plot. Network World, 07/15/2008.

Symantec: Microsoft Access ActiveX attacks will intensify
An easy-to-use toolkit used to hack computers has now been updated to take advantage of an unpatched security vulnerability in Microsoft's software, which could mean attacks will intensify, according to vendor Symantec. IDG News Service, 07/14/2008.
**********

From the interesting reading department:

Insider threat looms large as San Francisco's network crisis plays out
The unfolding cliffhanger in San Francisco this week -- in which a city network administrator has been arrested for allegedly holding the network hostage -- represents an extreme example of the insider threat that IT security vendors and others have been sounding the alarm about for years. Network World, 07/16/2008.
Also: Report: IT admin locks up San Francisco's network

Data can leak from partially encrypted disks
If you're using encryption software to keep part of your computer's hard drive private, you may have a problem, according to researchers at the University of Washington and British Telecommunications. They've discovered that popular programs like Word and Google Desktop store data on unencrypted sections of a computer's hard drive -- even when the programs are working with encrypted files. IDG News Service, 07/16/2008.

Jason Meserve is multimedia editor at Network World.