MDKA-2007:129 : acpid

The acpid daemon wrote a lot of information about ACPI events in the system logs, making harddisks too busy on laptops. This update package suppresses these events logs in the default setup, and enables them in debug mode only. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

Mandrake Linux Security Advisory : tomcat5 (MDKSA-2007:241)

A number of vulnerabilities were found in Tomcat : A directory traversal vulnerability, when using certain proxy modules, allows a remote attacker to read arbitrary files via a .. dot dot sequence with various slash, backslash, or url-encoded backslash characters CVE-2007-0450; affects Mandriva...

Mandrake Linux Security Advisory : pcre (MDKSA-2007:211)

Multiple vulnerabilities were discovered by Tavis Ormandy and Will Drewry in the way that pcre handled certain malformed regular expressions. If an application linked against pcre, such as Konqueror, parses a malicious regular expression, it could lead to the execution of arbitrary code as the us...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:202)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.8. This update provides the latest Firefox to correct these issues. As well, it provides Firefox 2.0.0.8 for older products. %NASLMINLEVEL 70300 C Tenable Network Security,...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:226)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The tcpsacktagwritequeue function in the Linux kernel 2.6.21 through 2.6.23.7 allows remote attackers to cause a denial of service via crafted ACK responses that trigger a NULL pointer dereference CVE-2007-5501. To updat...

Mandrake Linux Security Advisory : apache (MDKSA-2007:127)

The recallheaders function in modmemcache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously-used data, which could be used to obtain potentially sensitive information by unauthorized users. Updated packages have...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:126-1)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.4. This update provides the latest Firefox to correct these issues. Update : The l10n language packages have now been updated and are available. %NASLMINLEVEL 70300 C Tenab...

Mandrake Linux Security Advisory : bind (MDKSA-2007:100)

A vulnerability in ISC BIND 9.4.0, when recursion is enabled, could allow a remote attacker to cause a denial of service daemon exit via a certain sequence of queries. BIND 9.4.1, which corrects this issue, is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : wpa_supplicant (MDKSA-2007:245)

Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 allows remote attackers to cause a denial of service crash via crafted TSF data. Updated package fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

MDKA-2007:028 : openssl

This update fixes a problem with OpenSSL and the 3des cipher. Among other problems, ssh would stop working when using this cipher with protocol 1. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDKA-2007:060 : gnome-vfs2

Unionfs filesystems were not being recognized as supporting trash for GNOME applications. This was preventing the Flash-based product to have a fully functional trash under the GNOME desktop environment. This update fixes the bug and improves performance for XFS filesystem users as well...

MDKA-2007:067 : rsh

The rsh-server package contained incorrect PAM authentication configuration files that prevented clients from being able to access the server. The updated package contains corrected versions of these configuration files and allows correct access to the server. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

MDKA-2007:044 : rfbdrake

rfbdrake used to crash when displaying error messages. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDKA-2007:053 : totem

Bugs in xine-lib and totem were preventing the totem browser plugin from playing some multimedia files from within a web browser. This issue is fixed, as well as some media file support in the browser plugin and other issues in the standard media player. %NASLMINLEVEL 999999 @DEPRECATED@ This...

MDKA-2007:121 : foo2zjs

Due to a change of URLs on foo2zjs project, the firmware download for some common printers was failing, when configuring such printers with printerdrake. This update packages fix the issue by updating those URLs. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

MDKA-2007:056 : pidentd

The pidentd package had incorrect requirements that prevented it from being installed. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDKA-2007:057 : xinitrc

The xdm scripts from the xinitrc package were not calling the sessreg utility, which is responsible for recording user logins on wtmp, correctly. This would prevent logins being registered when in graphical mode. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

MDKA-2007:037 : initscripts

The text message printed over the bootsplash image was always displayed in English during shutdown or reboot, never being translated using the system's locale settings. This update package resolves the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

MDKA-2007:073 : gtk+2.0

With some window managers such as IceWM or matchbox, or when using no window manager, the GTK file chooser was resizing infinitely. This bug notably occurred in the save dialog of Mozilla Firefox. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecat...