heise online news 05/12/2008

heise online news 05/12/2008 www.heise-online.co.uk Overview of the news from the past 24 hours heise online news Update for SquirrelMail resolves cross-site scripting vulnerability Using maliciously crafted HTML code in emails, it was possible to trick the HTML filter into executing JavaScript in the user's browser when opening an email › Read article     Firefox add-on displays Word 2007 documents In addition to a plug-in for Firefox, the Microsoft-initiated open source project has released a new version of the OpenDocument converter for Office 2003, XP and 2007. The converter was first released at the beginning of 2007 › Read article     IBM offers Microsoft-free desktops via Linux-on-Linux virtualisation IBM has announced the immediate availability of a Microsoft-free virtual desktop. The software runs on a back-office server that can handle several dozen clients › Read article     Security services provider FrSIRT reborn as VUPEN Security The company feels its new name reflects its business better than the previous one. VUPEN plans to concentrate on the new "exploits & PoCs service", selling exploits and proofs of concept to manufacturers › Read article     ClamAV 0.94.2 resolves buffer overflow when scanning JPGs A recursive buffer overflow could occur when checking malformed jpegs with embedded thumbnails, effectively crashing the program › Read article     Laser printer dust isn't from the toner Fraunhofer-Gesellschaft confirms previous suppositions on the composition of nano-particles from laser printers › Read article     Security update for VMware A malicious request sent from the guest operating system to the virtual hardware can cause the virtual hardware to write to physical memory › Read article     Wikipedia to simplify contribution process A large donation is to be used to simplify contributing to the free Wikipedia internet encyclopedia. The Stanton Foundation has donated a total of $890,000 to the Wikimedia Foundation to reduce access hurdles › Read article     Service Pack for Novell Open Enterprise Server SP1 incorporates improved integration with Windows and a new upgrade tool, aimed at making it easier to move to OES from Netware › Read article     Python 3.0 (final) arrives Python 3.0 (final) has been released moving the white space sensitive language into a new phase › Read article     Version 1.6 of the Apache Velocity Java Templating Engine is released Apache Velocity version 1.6 is now available. This new version of the Java templating engine is compatible with earlier versions and is suitable for developing dynamic web sites › Read article     This newsletter is sent to in a multipart format. If you want to read it as plain text, you will have to change the display mode of your e-mail program. You are receiving heise online news because you subscribed at our website. If you no longer wish to receive the newsletter, you can cancel your subscription at http://www.heise-online.co.uk/newsletter/manage/news. For more news from the world of technology, subscribe to our other newsletters: Newsletter heise open source: All the latest about Free and Open Source software from heise online, including news, features, analysis and case studies. www.heise-online.co.uk/newsletter/manage/open Newsletter heise Security: IT security news and alerts to keep your systems secure, with features giving an in-depth look at the world of IT security. www.heise-online.co.uk/newsletter/manage/security Newsletter heise networks features: In-depth articles, tools and techniques for networking and communications. www.heise-online.co.uk/newsletter/manage/networks Legal notice Publishers: Christian Heise, Ansgar Heise, Christian Persson Editor-in-chief: Jonathan Bennett All rights reserved. Any copies or dissemination on any medium, either in part of whole, requires the written consent of the publisher. Copyright (c) 2008 Heise Media UK Ltd.