[ MDVSA-2009:337 ] proftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:337 http://www.mandriva.com/security/ Package : proftpd Date : December 22, 2009 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been...

Mandriva Linux Security Advisory : koffice (MDVSA-2009:336)

Security vulnerabilities have been discovered and fixed in pdf processing code embedded in koffice package CVE-2009-3606 and CVE-2009-3609. This update fixes these vulnerabilities. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:335)

A vulnerability was discovered and corrected in ffmpeg : MPlayer allows remote attackers to cause a denial of service application crash via 1 a malformed AAC file, as demonstrated by lol-vlc.aac; or 2 a malformed Ogg Media OGM file, as demonstrated by lol-ffplay.ogm, different vectors than...

Mandriva Linux Security Advisory : postgresql (MDVSA-2009:333)

Multiple vulnerabilities was discovered and corrected in postgresql : NULL Bytes in SSL Certificates can be used to falsify client or server authentication. This only affects users who have SSL enabled, perform certificate name validation or client certificate authentication, and where the...

MDVA-2009:253 : mpg123

A regression was found and fixed for mpg123 while attempting to load the mpg123 modules. This regression stems from MDVSA-2009:307 libtool ltdl. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

[ MDVSA-2009:333 ] postgresql

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:333 http://www.mandriva.com/security/ Package : postgresql Date : December 15, 2009 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 3.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple...

Mandriva Security Advisory MDVSA-2009:276-1 (python-django)

The remote host is missing an update to python-django announced via advisory MDVSA-2009:276-1. OpenVAS Vulnerability Test $Id: mdksa20092761.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:276-1 python-django Authors: Thomas Reinke Copyright: Copyrig...

Mandriva Linux Security Advisory : gimp (MDVSA-2009:296-1)

A vulnerability was discovered and corrected in gimp : Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow...

MDVA-2009:241 : shorewall

This update upgrades the shorewall package to the 4.0.15 version, which is the latest version in the shorewall-4.0 series. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Linux Security Advisory : dia (MDVSA-2009:046-1)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current dia working directory CVE-2008-5984. This update...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:328)

A vulnerability has been found and corrected in ntp : Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged information about all such packets and replied with an NTP packet that was treated as malformed when received by another ntpd....

Mandriva Linux Security Advisory : OpenEXR (MDVSA-2009:191-1)

Multiple vulnerabilities has been found and corrected in OpenEXR : Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer...

Mandriva Linux Security Advisory : clamav (MDVSA-2009:327)

Multiple vulnerabilities has been found and corrected in clamav : Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive CVE-2009-1241. libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of...

MDVA-2009:032-1 : eclipse

This update addresses minor issues with eclipse. eclipse can not be installed after firefox3 installation 48095 Update: Packages for 2008.0 are being provided due to extended support for Corporate products. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch i...

MDVA-2009:240 : doxygen

doxygen was segfaulting while generating HTML documentation and therefore it has been backported from Mandriva Linux 2010.0 that is proven to work. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

Mandriva Linux Security Advisory : mono (MDVSA-2009:322)

Multiple vulnerabilities has been found and corrected in mono : IOActive Inc. found a buffer overflow in Mono.Math.BigInteger class in Mono 1.2.5.1 and previous versions, which allows arbitrary code execution by context-dependent attackers CVE-2007-5197. Multiple cross-site scripting XSS...

Mandriva Linux Security Advisory : mysql (MDVSA-2009:326)

Multiple vulnerabilities has been found and corrected in mysql : MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' b single-quote single-quote token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service daemon...

Mandriva Linux Security Advisory : ruby (MDVSA-2009:325)

Multiple vulnerabilities was discovered and corrected in ruby : ext/openssl/osslocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSPbasicverify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a...

Mandriva Linux Security Advisory : apache (MDVSA-2009:323)

Multiple vulnerabilities has been found and corrected in apache : Memory leak in the zlibstatefulinit function in crypto/comp/czlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service memory consumption via multiple calls, as demonstrated by initial S...

Mandriva Linux Security Advisory : xmlsec1 (MDVSA-2009:318)

Multiple security vulnerabilities has been identified and fixed in xmlsec1 : A missing check for the recommended minimum length of the truncated form of HMAC-based XML signatures was found in xmlsec1 prior to 1.2.12. An attacker could use this flaw to create a specially crafted XML file that forg...