Mandriva Linux Security Advisory : openafs (MDVSA-2009:099-1)

Multiple vulnerabilities has been found and corrected in openafs : The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted ...

MDKA-2007:104 : mandriva-doc

The Mandriva documentation as shipped in Mandriva Linux 2008.0 did not contain the full ptBR translation. This update provides it and some other minor documentation fixes. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDKA-2007:102 : drakxtools

The drakxtools and drakfirsttime packages in the 2008.0 mirror tree were older than those packages provided in the release media. This update syncs the packages with the official versions from the CD/DVD media. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

Mandriva Linux Security Advisory : krb5 (MDVSA-2009:082)

The spnegogssacceptseccontext function in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via invalid ContextFlags data in the reqFlags field in a negTokenInit...

Mandriva Linux Security Advisory : tk (MDVSA-2008:041)

The ReadImage function in Tk did not check codeSize read from GIF images prior to initializing the append array, which could lead to a buffer overflow with unknown impact. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : mpg123 (MDVSA-2009:093-1)

A vulnerability has been found and corrected in mpg123 : Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negati...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:122)

A vulnerability was discovered in ClamAV and corrected with the 0.93.1 release : libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read. CVE-2008-2713 Other bugs have also been corrected in 0.93...

Mandriva Linux Security Advisory : ed (MDVSA-2008:200)

A heap-based buffer overflow was found in GNU ed that allowed context-dependent or user-assisted attackers to execute arbitrary code via a long filename CVE-2008-3916. This update provides GNU ed 1.0, which is not vulnerable to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

MDVA-2008:092 : python-sip

The python-sip package in Mandriva Linux 2008.0 release contained a packaging bug, making it fail to obsolete old package names. That would lead to an upgrade failure, and python-devel would not install due to unsatisfied dependencies. This update fixes that issue. %NASLMINLEVEL 70300 @DEPRECATED...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:199)

A number of vulnerabilities were discovered in Wireshark that could cause it to crash while processing malicious packets CVE-2008-3146, CVE-2008-3932, CVE-2008-3933, CVE-2008-3934. This update provides Wireshark 1.0.3, which is not vulnerable to these issues. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : mod_perl (MDVSA-2009:091-1)

A vulnerability has been found and corrected in modperl v1.x and v2.x : Cross-site scripting XSS vulnerability in Status.pm in Apache::Status and Apache2::Status in modperl1 and modperl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web...

Mandriva Linux Security Advisory : joomla (MDVSA-2008:060)

Several severe security issues were discovered in the Joomla! PHP-based content management system. These issues have been fixed in version 1.0.15 which is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandriva Update for vim MDVSA-2008:236-1 (vim)

Check for the Version of vim OpenVAS Vulnerability Test Mandriva Update for vim MDVSA-2008:236-1 vim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for symlinks MDVA-2008:140 (symlinks)

Check for the Version of symlinks OpenVAS Vulnerability Test Mandriva Update for symlinks MDVA-2008:140 symlinks Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for vorbis-tools MDVA-2008:010 (vorbis-tools)

Check for the Version of vorbis-tools OpenVAS Vulnerability Test Mandriva Update for vorbis-tools MDVA-2008:010 vorbis-tools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for openafs MDKA-2007:124 (openafs)

Check for the Version of openafs OpenVAS Vulnerability Test Mandriva Update for openafs MDKA-2007:124 openafs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for mysql MDVSA-2008:017 (mysql)

Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2008:017 mysql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for blender MDVSA-2008:204 (blender)

Check for the Version of blender OpenVAS Vulnerability Test Mandriva Update for blender MDVSA-2008:204 blender Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for audit MDVSA-2008:083 (audit)

Check for the Version of audit OpenVAS Vulnerability Test Mandriva Update for audit MDVSA-2008:083 audit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for rpmdrake MDVA-2008:123 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:123 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...