Mandrake Linux Security Advisory : clamav (MDKSA-2006:184)

An integer overflow in previous versions of ClamAV could allow a remote attacker to cause a Denial of Service scanning service crash and execute arbitrary code via a Portable Executable PE file CVE-2006-4182. Another vulnerability could allow a remote attacker to cause a DoS via a crafted...

MDKA-2005:050 : scim-qtimm

Due to a bug in the RPM requires for the scim-qtimm package, it was only installable on i586 platforms, and not on x8664 due to differences in the naming for libqt3 vs. lib64qt3. This update corrects the requires allowing the package to be installed on Mandriva Linux 2006/x8664. %NASLMINLEVEL...

Mandrake Linux Security Advisory : proftpd (MDKSA-2006:232)

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value. Packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : libneon0.26 (MDKSA-2007:013)

An array index error in the URI parser in neon 0.26.0 to 0.26.2 could possibly allow remote malicious servers to cause a crash via a URI with non-ASCII characters. This vulnerability may only exist on 64bit systems. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : libksba (MDKSA-2006:183)

The libksba library, as used by gpgsm in the gnupg2 package, allows attackers to cause a denial of service application crash via a malformed X.509 certificate in a signature. libksba-0.9.15 in Mandriva 2007.0 is not affected by this issue. Updated packages have been patched to correct this issue...

Mandrake Linux Security Advisory : samba (MDKSA-2007:034)

A logic error in the deferred open code for smbd may allow an authenticated user to exhaust resources such as memory and CPU on the server by opening multiple CIFS sessions, each of which will normally spawn a new smbd process, and sending each connection into an infinite loop. CVE-2007-0452 The...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2007:005)

Sean Larsson of iDefense Labs discovered several vulnerabilities in X.Org/XFree86 : Local exploitation of a memory corruption vulnerability in the 'ProcRenderAddGlyphs' function in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server,...

Mandrake Linux Security Advisory : avahi (MDKSA-2006:215)

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service. Packages have been patched to correct this issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandrake Linux Security Advisory : chromium (MDKSA-2006:213)

Chromium is an OpenGL-based shoot them up game with fine graphics. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities : Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent...

MDKA-2006:057 : clamav

There are no known security issues with clamav-0.88.5, which was included in the last update MDKSA-2006:184. Upstream has released a new stable 0.88.6, with some bugfixes. This update is to address user reports with regards to clamav's behavior of producing output such as: WARNING: Your ClamAV...

MDKA-2006:049 : desktop-common-data

There were some problems with the menu system in Mandriva Linux 2007. Some menu categories were not displayed or properly translated, and editing the menus with the GNOME menu editor alacarte was not working. This update fixes these problems. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2006:063 : tomboy

A bug in the build system made the tomboy package miss some dependencies like gnome-sharp2 on x8664. The rebuilt package now installs all required packages. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDKA-2006:018 : ghostscript

A number of bugs have been corrected with this latest ghostscript package including a fix when rendering imaged when converting PostScript to PDF with ps2pdf, a crash when generating PDF files with the pdfwrite device, several segfaults, a fix for vertical japanese text, and a number of other...

MDKA-2006:006 : xorg-x11

Issues have been reported with display corruption for various cards, including several ATI and Nvidia cards when using the free drivers. There was also an issue with the Greek keyboard layout. These should be corrected by the upstream 6.9.0 final, which this package is based on. Updated packages...

MDKA-2006:009 : OpenOffice.org

Updated OpenOffice.org package correct a bug that caused a random crash when opening certain sxi files. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script w...

MDKA-2006:040 : wxPythonGTK

A problem with wxPythonGTK would prevent some python programs, such as pyshell, from starting due to incorrect path locations. The updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabl...

MDKA-2006:032 : epiphany-extensions

Recently, epiphany was updated to work with the latest Mozilla Firefox however new epiphany-extensions packages were not available. This update provides updated epiphany-extensions for epiphany. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDKA-2006:067 : lsb

When the xorg-x11 package was broken up into subpackages, libGL.so.1, which is required by LSB, ended up not being a requirement of the lsb meta-package. This update corrects this issue and should allow lsblibchk to run without failures. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2007:004 : mesa

There was a problem with mesa, where OpenGL applications would crash for users having some i965G chipsets. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled ...

MDKA-2006:054 : audacity

For the French locale, menu items which contained accented characters do not show up in the Audacity sound editor. This is because the French translation file was not in the correct character encoding. This issue is corrected in the updated packages. %NASLMINLEVEL 999999 @DEPRECATED@ This script...