Mandrake Linux Security Advisory : gd (MDKSA-2007:035)

Buffer overflow in the gdImageStringFTEx function in gdft.c in the GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font. Packages have been patched to correct...

SUSE-SA:2006:046: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:046 clamav. Damian Put discovered a bug in the UPX decoder used for scanning UPX compressed Windows executables. The bug allows for a heap buffer overflow and may potentially be exploitable to execute arbitrary code. ClamAV has be...

MDKA-2005:046 : drakxtools

A new version of the HPLIP driver suite is now available. This new version introduces support for parallel printers and multi-function devices; now USB, parallel, and network TCP/Socket devices are now fully supported, as well as the devices that the former HPOJ suite handled. The new HPLIP suite...

MDKA-2006:034 : ipsec-tools

IPsec-Tools1 is a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. This update fixes a few issues and introduces new functionalities to the package provided for Mandriva 2006 users: - fixed tunnel mode connection 19460 2 - fixed GSSAPI build - version update: 0.6.6 - enabled...

MDKA-2006:005 : kat

A number of fixes are available with this new kat update including a fix in the support of utf8 files, a number of crash situation were corrected, a double deletion that caused a crash when kat was closed was corrected, and finally the mail indexer is disabled due to problems it caused...

MDKA-2005:050 : scim-qtimm

Due to a bug in the RPM requires for the scim-qtimm package, it was only installable on i586 platforms, and not on x8664 due to differences in the naming for libqt3 vs. lib64qt3. This update corrects the requires allowing the package to be installed on Mandriva Linux 2006/x8664. %NASLMINLEVEL...

SUSE-SA:2006:077: flash-player

The remote host is missing the patch for the advisory SUSE-SA:2006:077 flash-player. This security update brings the Adobe Flash Player to version 7.0.69. The update fixes the following security problem: CVE-2006-5330: CRLF injection vulnerabilities in Adobe Flash Player allows remote attackers t...

SUSE-SA:2006:033: awstats

The remote host is missing the patch for the advisory SUSE-SA:2006:033 awstats. This update fixes remote code execution vulnerabilities in the WWW statistical analyzer awstats. Since back porting awstats fixes is error prone we have upgraded it to upstream version 6.6 which also includes new...

SUSE-SA:2006:039: kdebase3-kdm

The remote host is missing the patch for the advisory SUSE-SA:2006:039 kdebase3-kdm. The KDE Display Manager KDM stores the type of the previously used session in the user's home directory. By using a symlink a local attacker could trick kdm into also storing content of files that are normally no...

Mandrake Linux Security Advisory : libx11 (MDKSA-2006:199)

The Xinput module modules/im/ximcp/imLcIm.c in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor...

SUSE-SA:2006:055: openssl,mozilla-nss

The remote host is missing the patch for the advisory SUSE-SA:2006:055 openssl,mozilla-nss. If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This problems...

Mandrake Linux Security Advisory : rpm (MDKSA-2006:200)

A heap-based buffer overflow was discovered in librpm when the LANG or LCALL environment variable is set to ruRU.UTF-8 and possibly other locales, which could allow for user-assisted attackers to execute arbitrary code via crafted RPM packages. Updated packages have been patched to correct this...

SUSE-SA:2007:004: krb5

The remote host is missing the patch for the advisory SUSE-SA:2007:004 krb5. Various bugs in the Kerberos5 libraries and tools were fixed which could be used by remote attackers to crash and potentially execute code in kadmind. - CVE-2006-6144 / MITKRB5-SA-2006-002: the RPC library could call an...

SUSE-SA:2006:043: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:043 apache,apache2. The following security problem was fixed in the Apache and Apache 2 web servers: modrewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer...

SUSE-SA:2006:068: MozillaFirefox,MozillaThunderbird,SeaMonkey

The remote host is missing the patch for the advisory SUSE-SA:2006:068 MozillaFirefox,MozillaThunderbird,SeaMonkey. MozillaFirefox has been updated to the security update release 1.5.0.8, MozillaThunderbird has been updated to 1.5.0.8, and the Mozilla SeaMonkey suite has been updated to 1.0.6 to...

Mandrake Linux Security Advisory : gv (MDKSA-2006:214-1)

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the DocumentMedia header. Package...

Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit

Exploit for linux platform in category remote exploits =============================================================== Axigen eMail Server 2.0.0b2 pop3 Remote Format String Exploit =============================================================== / axiagen.c Axigen eMail Server v2.0 beta by fuGich...

MDKA-2006:057 : clamav

There are no known security issues with clamav-0.88.5, which was included in the last update MDKSA-2006:184. Upstream has released a new stable 0.88.6, with some bugfixes. This update is to address user reports with regards to clamav's behavior of producing output such as: WARNING: Your ClamAV...

MDKA-2006:063 : tomboy

A bug in the build system made the tomboy package miss some dependencies like gnome-sharp2 on x8664. The rebuilt package now installs all required packages. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDKA-2005:047 : apcupsd

The apcupsd package as shipped with Mandriva Linux 2006 was missing the main apcupsd configuration file. As a result, those upgrading from earlier versions would have their existing configuration file moved to /etc/apcupsd/apcupsd.conf.rpmsave with no new configuration file to replace it, which...