Mozilla has released Firefox 3.5.1 to fix the recently reported security vulnerability in the Just-in-Time (JIT) JavaScript compiler, an exploit for the Windows version of which is already doing the rounds. Attackers can exploit the vulnerability to inject and execute code on vulnerable systems.

After rumors of an OpenSSH exploit vulnerability got out, an anonymous hacker group intends to release the exploit code and an accompanying worm "within 48 hours."

Five hours after Mozilla officially released Firefox 3.0, researchers found a vulnerability in the new browser.

What is that I say, a win for Linux? Look now that all the nay-sayers, pundits, and critics have had a chance to chime in lets look at the big picture. The openssh vulnerability is not something to take lightly and I’m not it’s just I think allot of noise was made for something I think was handled much better than any Microsoft vulnerability ever has.

Brad Spengler, the developer behind the Grsecurity project, has published an exploit for a vulnerability in the Tun interface in Linux kernel 2.6.30 and 2.6.18, used in Red Hat Enterprise Linux 5 (RHEL5), which can be exploited by attackers to obtain root privileges. Of particular interest is the fact that the exploit is even able to circumvent security extensions such as SELinux.

The Pidgin developers have released version 2.7.0 of their open source instant messenger application, adding a number of new features and correcting a vulnerability in libpurple's MSN protocol plug-in

"Moments ago Apple announced that Windows users can now download and run their popular Safari web browser. That's right, more Apple software on Windows boxes. Safari is a pretty cool browser, and I do use it on my MacBook Pro. But where's my Safari for Linux? Why wasn't today's announcement about open sourcing Safari?"

Appnr is a web-based tool and a service that install applications on Ubuntu. This is a web interface for APT, and the package is downloaded and installed from Ubuntu/Third-party repositories.

The AptURL Protocol Handler and a Web browser support are required to install applications.

OpenVAS stands for Open Vulnerability Assessment System and is a complete tool for network security scanning including a graphical user front-end. I is used to detect security problems in remote systems and applications. The OpenVAS development team consists of various interested parties from academia and commercial entities as well as individuals.