A column at Oreillynet.com reviews the recent Linux-based Adore Worm; buffer overflows in xntpd and ntpd; and vulnerabilities in SharePlex, Ultimate Bulletin Board, Lucent/Orinoco Closed Network, Red Hat’s OpenSSH, Cisco Content Services Switches, and IPFilter.

From BusinessWire via Wide Open News:

At the Embedded Systems Conference today, RidgeRun, Inc. announced that its recently launched DSPLinux SDK
will be hosted by DevelopOnline.

This will provide online access to the DSPLinux SDK and Appliance Simulator. The DSPLinux SDK allows developers to
build applications for Texas Instruments (TI) DSP + ARM platforms prior to having access to the actual hardware.
Availability at DevelopOnline is anticipated to be in May 2001.

From PR Newswire:

Lineo, Inc., a leading innovator in embedded systems, real-time and high
availability solutions today announced it has opened an office in Silicon
Valley to become the new Lineo Embedded Systems Center (LESC) focused on
sales, marketing and services functions under the direction of Richard Larsen,
senior vice president of sales, marketing and services, Lineo, Inc.

From LinuxPR: MontaVista Software Inc., the company
powering the embedded revolution, today announced the availability of the Hard
Hat Linux embedded operating system and development tools for the Hitachi,
Ltd. SH-3 and SH-4 microprocessors. The high performance, low-power
SuperH processors provide an ideal hardware platform for Hard Hat Linux,
especially for target applications in handheld, wireless, consumer, networking
and telematics systems.

Posted at LWN.net: “The Midnight Commander, mc(1), is a ncurses-based file manager.
A local attacker could trick mc(1) into executing commands with
the privileges of the user running mc(1) by creating malicious
directory names. This attack leads to local privilege escalation.”

From LinuxPR: REDSonic, Inc., a leading provider of
embedded system development tools and creators of the flexible Real-Time
Linux kernel, REDICE-Linux, announced today it is partnering with
M-Systems, a leader in flash disk data storage products for embedded systems,
Internet appliances and telecom/networking markets.

Sander Vesik writes, “I am happy to report that OpenOffice.org has released a new snapshot — bearing the number 625 — bringing it another step closer to the final release and has (as usual) a multitude of new enhancements (see the release notes at OpenOffice.org for details) and no small number of bug fixes. Most interesting changes are probably out-of-the-box (or rather, out-of-the-tarball) support for printing on Unix platforms, a new xml packaging format that keeps style and content separately, switch to using xml as the default file format for all components and the updates to the database module.”

At LinuxPR
: I.D.E.A.L. Technology Corporation of Orlando,
Florida, announces its strategic merger with Anthony Awtrey Consulting of
Melbourne, Florida, creating the largest Linux consulting company in the State of
Florida. With the merger, the new company, known as I.D.E.A.L. Technology,
will keep offices in Orlando and Melbourne. The merger will expand the
company’s client base, improve customer service and strengthen alliances with
technology companies along Florida’s Space Coast.

Posted at LWN.net: The text editor vim, Vi IMproved, was found vulnerable to two security
bugs.
1.) a tmp race condition
2.) vim commands in regular files will be executed if the status line
of vim is enabled in vimrc
Both vulnerabilities could be used to gain unauthorized access to more
privileges.

From LinuxPR: Boulder Instruments
(www.boulderinstruments.com) announced today Linux support for its real time
PCI and CPCI Recorders. Linux support will be generally available on June 1,
2001 in direct response to increased customer demand both domestically and
abroad.