MDVA-2009:177 : x11-server

Display keeps sleeping. Settings set not to but within seconds on being idle screen sleeps or hibernates. This update fixes this issue making the users settings about display respected. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2009:213 : perl-URPM

perl-URPM can sometimes get confused about which GPG pubkey belong to which media. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDVA-2009:186 : firefox

This is a maintenance and bugfix update for firefox 3.5.x: Bug 468562 - ASSERTION: Inserting multiple children without flushing Bug 521750 - Put a runtime NSIsMainThread check in nsCycleCollector::Suspect2 and Forget2 Bug 525326 - Crashes in gif decoder @ xul.dll@0x348945@...

MDVA-2009:088 : rpmdrake

This update fixes one issues with MandrivaUpdate: in previous update, a fix wrongly break the displaying of update descriptions & reasons. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

MDVA-2009:115 : webkit

Webkit shipped in 2009.1 has a bug that closes The Gimp help-browser plugin, this update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script...

MDVA-2009:255 : fontconfig

A bug in fontconfig language cache was generating invalid cache which would cause crashes or freeze when upgrading previous Mandriva Linux release to Mandriva Linux 2010 using live update feature. This updates fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

Mandriva Linux Security Advisory : mysql (MDVSA-2010:012)

Multiple vulnerabilities has been found and corrected in mysql : mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not 1 properly handle errors during execution of certain SELECT statements with subqueries, and does not 2 preserve certain nullvalue flags during execution of...

Mandriva Linux Security Advisory : opensc (MDVSA-2009:123)

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted CVE-2009-1603. The updated packages...

Mandriva Linux Security Advisory : apache (MDVSA-2009:102)

A vulnerability has been found and corrected in apache : modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...

MDVA-2009:117 : ruby-RubyGems

On x8664, rubygems assumes that the gem installation path is in /usr/lib64/ruby. This is problematic because all of the Mandriva ruby- packages install their rb files under /usr/lib/ruby regardless of the machine architecture; rubygems consequently cannot find any of the installed gems. This upda...

MDVA-2009:258 : webkit

MDVA-2009:252 introduced a regression with the newer version of the webkit package, which made the Mandriva Control Center crash. This update reverts the webkit package to the previous version. Also this update reintroduces the issue fixed by MDVA-2009-252. %NASLMINLEVEL 70300 @DEPRECATED@ This...

MDVA-2009:162 : qca

This update resolves a new dependency introduced by okular added with the kde-4.2.x updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2009:245 : espeak

In Mandriva 2010.0, espeak did not support the pulseaudio audio system, which rendered incomprehensible speech. This update changes the build of espeak to use pulseaudio as audio output. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2009:201 : samba

This is a maintenance and bugfix release of samba 3.3.x. Major enhancements in Samba 3.3.9 include: o Fix trust relationships to windows 2008 2008 r2 bug 6711. o Fix file corruption using smbclient with NT4 server bug 6606. o Fix Windows 7 share access which defaults to NTLMv2 bug 6680. o Fix SAM...

MDVA-2009:161 : silc-toolkit

The silc-toolkit was linked in a wrong way, it depended on symbols no longer exported by libidn. This made it impossible to use the SILC protocol from pidgin. This update changes the linking to use the included IDN resolver instead of libidn. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:035)

This updates provides a new OpenOffice.org version 3.1.1. It holds security and bug fixes described as follow : An integer underflow might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow...

Mandriva Linux Security Advisory : php (MDVSA-2009:248)

Multiple vulnerabilities was discovered and corrected in php : The phpopensslapplyverificationpolicy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates CVE-2009-3291...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:329)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddpN device is not found, allows remote attackers to...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:119)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The exitnotify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAPKILL capability is held, which allows local users to send an arbitrary signal to a process by...

Windows live msn (V 2009 build 14.0.8117.416) ActiveX ADD & delete user

Exploit for windows platform in category remote exploits ======================================================================= Windows live msn V 2009 build 14.0.8117.416 ActiveX ADD & delete user ======================================================================= In The Name Of Allah The...