MDVA-2010:016 : firefox

It was dicovered that the kde4ff theme for firefox 3.5 firefox-theme-kde4ff did not work, to address this problem the kfirefox theme firefox-theme-kfirefox is provided as a drop in replacement. It was discovered that the beagle extension for firefox firefox-ext-beagle had the wrong release number...

MDVA-2010:150 : k3b

This updates fixes issues with k3b when ripping CDs with external encoder such as FLAC. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically...

MDVA-2009:233 : msec

This update fixes two issues with msec: - saving new security level with 'msec --save' would result in an error - msec would show a bogus error when checking permissions on non-local files bug 56088 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDVA-2010:166-1 : php-eaccelerator

It was discovered php-eaccelerator-0.9.6 did not work properly with openbasedir for php-5.3.2. This advisory upgrades php-eaccelerator to 0.9.6.1 which solves this problem. Update: It was discovered php-eaccelerator-0.9.6 did not work properly with openbasedir for php-5.2.13. This advisory upgrad...

Mandriva Update for paprefs MDVA-2010:183 (paprefs)

Check for the Version of paprefs OpenVAS Vulnerability Test Mandriva Update for paprefs MDVA-2010:183 paprefs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MDVA-2010:135 : desktop-common-data

xvt script was not detecting KDE4 properly and was forking KDE4 terminal, which could break some scripts. This updates fixes this issue and also disable some unwanted sound events when using Firefox 3.6.x under GNOME. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Mandriva Linux Security Advisory : dovecot (MDVSA-2010:104)

A vulnerability was discovered and corrected in dovecot : Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service CPU consumption via long headers in an e-mail message CVE-2010-0745. This update provides dovecot 1.2.11 which is not vulnerable ...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:002)

A security vulnerability has been identified and fixed in pidgin : Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:016)

This advisory updates wireshark to the latest 1.2.5 version, fixing several bugs and two security issues : - The 1 SMB and 2 SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service crash via a crafted packet CVE-2009-4377 - Buffer overflow in the...

Mandriva Linux Security Advisory : apache (MDVSA-2009:102)

A vulnerability has been found and corrected in apache : modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...

Mandriva Linux Security Advisory : mysql (MDVSA-2010:044)

A vulnerability has been found and corrected in mysql : MySQL is vulnerable to a symbolic link attack when the data home directory contains a symlink to a different filesystem which allows remote authenticated users to bypass intended access restrictions CVE-2008-7247. The updated packages have...

Mandriva Linux Security Advisory : freetype2 (MDVSA-2010:137)

Multiple vulnerabilities has been found and corrected in freetype2 : Multiple integer underflows/overflows and heap buffer overflows was discovered and fixed CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519. A heap buffer overflow was discovered in the bytecode support. T...

Mandriva Linux Security Advisory : nss_db (MDVSA-2010:077)

A vulnerability has been found and corrected in nssdb : The Free Software Foundation FSF Berkeley DB NSS module aka libnss-db 2.2.3pre1 reads the DBCONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or...

Mandriva Linux Security Advisory : opensc (MDVSA-2009:123)

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted CVE-2009-1603. The updated packages...

MDVA-2010:130 : rpm

This update fixes an issue with rpm filetriggers : when several file triggers are ran in parallel and try to read from stdin, a pipe filedescriptor leak leads to a deadlock and rpm freezing. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently ...

MDVA-2010:134 : sane

Sane wasn't compiled with V4L video4linux support. This packages update fixes this issue. Additional packages is being provided to satisfy the added dependencies. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2009:261 : kdepim4

In Mandriva 2010.0, because of a regression, the KTimetracker menu was missing many options, which made it unusable. Also in Mandriva 2010.0, when using Knotes inside Kontact the note title was left-cutted when using a long title. This update fixes these issues. %NASLMINLEVEL 70300 @DEPRECATED@...

MDVA-2010:111 : initscripts

This packages update fixes several issues in initscripts: - ensure dm-mod is loading in speedboot mode Mdv bug 57351 - ensure loadkeys is called in the right order Mdv bug 57134 - ensure hid is loaded in first pass for speedboot fix Macbook login - remove false check on alsa Mdv bug 57265 - avoid...

MDVA-2009:234 : msec

This update fixes two issues with msec: - msec would stop processing configuration file if a blank line is found bug 53031 - msec would show a bogus error when checking permissions on non-local files bug 56088 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patc...

MDVA-2009:242 : python-qt

The python-qt package included in Mandriva 2010.0 contains a API incompatibility problem with python-sip 4.9.1, which will cause downstream problem unusable. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...