Debian Linux project released today bug fixes for lighttpd and gaim package that allows remote attacks and DoS attacks.
Multiple buffer overflows were discovered in the Ubuntu Linux kernel and can be corrected by upgrading your system to latest kernel version.
Updated kernel packages that fix several bugs are now available for Debian Linux v4.0.
Ksplice is an open source project out of MIT that automates the process of applying security patches to the Linux kernel without rebooting Linux box.
Three vulnerabilities have been discovered in the mt-daapd DAAP audio server (also known as the Firefly Media Server)
Several remote vulnerabilities have been discovered in the TYPO3 content management framework.
Some vulnerabilities have been reported in APR-util, which can be exploited by malicious users and malicious people to cause a DoS (Denial of Service) – CVE-2009-1955, CVE-2009-1956, CVE-2009-0023 fix.
Hackers (read as cracker) attacking on unpatched versions of the Mambo content management system that can be used to build botnets for use in phishing scams and distributed denial of service (DDoS) attacks.
They are using PHP-based CMS mass-exploitation and other vulnerabilities in open source CMS applications. If you are in server, collocation businesses then watch out all these attacks.
Update Mambo as soon as possible. More information available at following sites: