Ejbca, the java based certification authority management software, reached version 3.6 and continues adding features, including auto-enroll certificates for Microsoft systems, support for delta CRLs, support for Oracle Application Server and Websphere, more WebService API commands, etc

The project also launched a new wiki.

Ejbca is primarily developed by Primekey, a swedish company, that also provides support.

NuFw adds user based filtering to the linux IP filtering layer iptables. It was developed by INL and released under GPL.
The agreement will enable the schools using the Amon firewall to use NuFW.
Amon, with currently 7000 deployment, is developed under the EOLE umbrella, aiming to develop Free and Open solutions under the GPL license.

As seen on Toolinux.

OpenOffice released an important security problem affecting all versions before 2.3.1, and more specifically the database component. The HSQLDB database engine "can be exploited to execute arbitrary static Java code via a specially crafted database document". All users are urged to upgrade.

SmoothWall 3.0, the firewall distribution developed with small businesses in mind, has been released, and features "efficient routing capabilities, advanced level reporting/logging and effortless one-click updates. Other new features include an improved VPN subsystem, email antivirus scanning and support for logging instant messaging applications such as MSN, Yahoo, ICQ and AOL." The Release Notes list the features in detail.

Sourcefire, the company built aroung the Snort intrusion detection software, acquired ClamAV, the well know anti-virus toolkit for Unix. This acquisition will not affect the license of the project, which will stay under the GPL.

Interesting to note is that ClamAV has nearly one million unique IP addresses downloading daily updates.

CISCO has released the Safe Mapping and Reporting Tool (SMART) on Sourceforge some time ago now, but it's making the news again. From the project's homepage, SMART "is a completely passive network flow visualization tool for small to medium sized IP networks featuring device and operating system identification and network service enumeration".