Debian: “The version of enscript (a tool to convert ASCII text to different formats) has been found to create temporary files insecurely.” Updates can be found here.

LinuxSecurity.com: This weeks issue of Linux Secutiry Week is out. Articles include ‘The Simplest Security: A Guide To Better Password Practices,’ ‘Filtering Spam with Procmail,’ ‘Using ssh Port Forwarding to Print at Remote Locations,’ and more. Check it out here.

jensend writes “GNU libc 2.2.5 has been released. Improvments include GCC 3 support, a newly optimized dynamic linker, and ports to PPC Hurd as well as x86-64 Linux. The glibc team concluded that a bug on Alpha systems, which seemed to be the showstopper, is actually a binutils bug, and binutils 2.12 is shaping up for a release as well.”

Matjaz Horvat writes, “Gartner Groups report on January 21, 2002, says: 15 percent of Asian companies run Linux.”
Information at IDG.net.

Posted at LWN.net: “The version of enscript (a tool to convert ASCII text to different
formats) has been found to create temporary files insecurely.

This has been fixed in version 1.6.2-4.1.”

Posted at LWN.net: “he version of enscript (a tool to convert ASCII text to different
formats) has been found to create temporary files insecurely.

This has been fixed in version 1.6.2-4.1.”

Slashdot has a link to a kernel discussion list with a post by senior kernel hacker Alan Cox saying he’d leave Red Hat if AOL Time Warner acquired the company.

Posted at LWN.net: The Police Information Technology Organisation (PITO) has awarded
netproject a contract to examine the issues of deploying Linux on up to
60,000 desktop computers in police forces throughout the UK.

LinuxSecurity Contributor writes, “Scott Wimer, CTO Cylant Software, discusses methods for improving the security of a computer
system in spite of their vulnerabilities in order to break out of the current security cycle.”
http://www.linuxsecurity.com/feature_stories/featu re_story-97.html

– by Robin “Roblimo” Miller –
We all hear plenty about Linux, about Apache, and about a few other high-profile Open Source and Free Software projects. Everybody writes about them, including us. But there are thousands of other excellent Open Source programs out there that get little or no publicity. Let’s change that.
Not long ago, NewsForge managing editor Grant Gross wrote about Virtual Machines and some software packages that allow people who don’t have mainframe-level budgets to make use of this technology. One reader noted that Grant had left out
the User-mode Linux Kernel (UML). As soon as he saw that comment, Grant contacted the UML project leaders, and you’ll see the resulting story within a day or two.

We enjoy supporting and publicizing innovative, useful Open Source and Free Software projects like UML. Well-funded companies that write Linux or Unix software or make Linux or Unix-compatible hardware either contact us directly or have their PR agencies contact us, so they’re easy for us to find. We welcome their news, and happily pass it on to you if we feel it’ll be interesting to even a few Linux.com and NewsForge readers. But we also like to write about people (and companies) that are doing useful work but don’t put a lot of effort into publicity.

NewsForge happily runs press releases about Linux and Open Source products, services, and events. A “press release” doesn’t need to be written by a PR agency or marketing person. Some of the most effective press releases we see come from people who obviously aren’t PR professionals, who just say what they have to offer and why it might interest the rest of the world. If you’re doing something you feel is important to Linux and Open Source users or developers, write a few paragraphs about it and submit your announcement here. Chances are, if your submission meets our simple selection criteria, it’ll appear within hours (not days) of the time you send it to us.

But there are plenty of developers who haven’t (yet) heard of Linux.com or NewsForge — or are so busy doing exciting work that they don’t have time to tell the world what they’re up to. This is why we’re asking for help.

If you know of a piece of software (or hardware) that is important to Linux or Open Source users or developers, but hasn’t gotten the public attention you feel it deserves, please use the “comments” space below this editorial to tell us about it. Or, if you prefer, email editors@linux.com.

We are serious about this. We know there are lots of people out there doing useful Free Software and Open Source work who deserve more credit than they get. So let’s get together and give them some!