MDKA-2007:128 : draklive

This update provides the version of the draklive tool that was used to build the 2008.0 live CDs. The original package in the 2008.0 repositories contained an obsolete version of the tool. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2008:013 : skencil

The package for the drawing application Skencil contained a bug which causes it not to be able to access the system fonts correctly. Consequently, it was impossible to enter text properly in Skencil, and Skencil would consume a high level of system resources if you attempt to use the text tools...

RHEL 4 : gpdf (RHSA-2007:1025)

Updated gpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME-based viewer for Portable Document Format PDF files. Alin Rad Pop discover...

CentOS 4 : tetex (CESA-2007:1027)

Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...

Mandriva Linux Security Advisory : tomcat5 (MDVSA-2009:018)

Apache Tomcat does not properly handle certain characters in a cookie value, which could possibly lead to the leak of sensitive information such as session IDs CVE-2007-5333. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : perl-Net-DNS (MDVSA-2008:073)

A vulnerability in the Net::DNS perl module was found that could allow remote attackers to cause a denial of service via a crafted DNS response. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

CentOS 4 / 5 : kdegraphics (CESA-2007:0729)

Updated kdegraphics packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:069)

Multiple memory management flaws were found in the GSSAPI library used by Kerberos that could result in the use of already freed memory or an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5901, CVE-2007-5971. A flaw was...

Ubuntu 8.04 LTS : perl regression (USN-700-2)

USN-700-1 fixed vulnerabilities in Perl. Due to problems with the Ubuntu 8.04 build, some Perl .ph files were missing from the resulting update. This update fixes the problem. We apologize for the inconvenience. Jonathan Smith discovered that the Archive::Tar Perl module did not correctly handle...

Mandriva Linux Security Advisory : openafs (MDVSA-2008:207)

A race condition in OpenAFS 1.3.40 through 1.4.5 allowed remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks CVE-2007-6599. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Securit...

Fedora 10 : perl-5.10.0-52.fc10 (2008-11736)

CVE-2007-4829 perl-Archive-Tar directory traversal flaws. Update of Pod::Simple with better html support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Mandriva Linux Security Advisory : tk (MDVSA-2008:041)

The ReadImage function in Tk did not check codeSize read from GIF images prior to initializing the append array, which could lead to a buffer overflow with unknown impact. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:095)

A vulnerability in HSQLDB before 1.8.0.9 in OpenOffice.org could allow user-assisted remote attackers to execute arbitrary Java code via crafted database documents CVE-2007-4575. A heap overflow was discovered in OpenOffice.org's EMF parser. An attacker could create a carefully crafted EMF file...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:226)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The tcpsacktagwritequeue function in the Linux kernel 2.6.21 through 2.6.23.7 allows remote attackers to cause a denial of service via crafted ACK responses that trigger a NULL pointer dereference CVE-2007-5501. To updat...

Mandrake Linux Security Advisory : apache (MDKSA-2007:127)

The recallheaders function in modmemcache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously-used data, which could be used to obtain potentially sensitive information by unauthorized users. Updated packages have...

MDKA-2007:115 : sound-juicer

A bug in sound-juicer could lead to locking the CD drive, preventing erasing or rewriting rewritable medias in it. This package fixes this bug and includes other stability fixes and translation updates. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is n...

Solaris 5.9 (sparc) : 119796-04

SEAM 1.0.2x86: patch for Solaris 9x86. Date this patch was last updated by Sun : Apr/03/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

MDKA-2007:122 : printerdrake

In Mandriva Linux 2007 Spring, printerdrake would not detect many network printers, due to defaulting to using a less comprehensive printer scan method than previous releases did. bug 30090 When changing the protocol for a configured network printer, printerdrake released with Mandriva Linux 2007...

MDKA-2007:056 : pidentd

The pidentd package had incorrect requirements that prevented it from being installed. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDKA-2007:114 : eclipse

The Eclipse IDE provided with 2008.0 does not run, instead outputting a glibc error or JVM termination error. This update fixes that, and some other bugs in the package. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...