Mandriva Linux Security Advisory : netpbm (MDVSA-2009:262)

A vulnerability has been found and corrected in netpbm : pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service crash via a crafted image file that triggers an out-of-bounds read CVE-2008-4799. Th...

mozilla-thunderbird多个安全漏洞

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:217-1 http://www.mandriva.com/security/ Package : mozilla-thunderbird Date : August 23, 2009 Affected: 2009.1 Problem Description: A number of security vulnerabilities have...

Mandriva Linux Security Advisory : imagemagick (MDVSA-2009:260-1)

A vulnerability has been found and corrected in ImageMagick, which could lead to integer overflow in the XMakeImage function in magick/xwindow.c, allowing remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer...

MDVA-2009:182 : gnucash

The widget to change a date field in gnucash did not react to keyboard input. This upgrades to the fixed version 2.2.7. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:258)

A regression was found with the self signed certificate signatures checking after applying the fix for CVE-2009-2409. An upstream patch has been applied to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Mandriva Linux Security Advisory : dbus (MDVSA-2009:256-1)

A vulnerability was discovered and corrected in dbus : The dbusvalidatesignaturewithreason function dbus-marshal-validate.c in D-Bus aka DBus uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix...

MDVA-2009:179 : mesa

There was a minor problem with a faulty path in the generated pkg-config .pc files. This update addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

[ MDVSA-2009:253 ] backuppc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:253 http://www.mandriva.com/security/ Package : backuppc Date : October 1, 2009 Affected: Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in backuppc: CgiUserConfigEdi...

[ MDVSA-2009:178 ] perl-IO-Socket-SSL

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:178 http://www.mandriva.com/security/ Package : perl-IO-Socket-SSL Date : September 30, 2009 Affected: 2009.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in...

Mandriva Linux Security Advisory : graphviz (MDVSA-2009:254-1)

A vulnerability was discovered and corrected in graphviz : Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitra...

Mandriva Linux Security Advisory : postgresql8.2 (MDVSA-2009:251-1)

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service backend shutdown by re-LOAD-ing libraries from a certain plugins directory CVE-2009-3229. The core server component in PostgreSQL 8.4...

Mandriva Linux Security Advisory : perl-IO-Socket-SSL (MDVSA-2009:252-1)

A vulnerability was discovered and corrected in perl-IO-Socket-SSL : The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the...

MDVSA-2009:178 : perl-IO-Socket-SSL

A vulnerability was discovered and corrected in perl-IO-Socket-SSL: The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the...

MDVA-2009:175 : kdepim4

Kmail users using DIMAP Disconected IMAP can have occasional deletion of folder emails in server in situations of local/server name move. This fix solves this major bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Mandriva Linux Security Advisory : newt (MDVSA-2009:249-1)

A vulnerability was discovered and corrected in newt : A heap-based buffer overflow flaw was found in the way newt processes content that is to be displayed in a text dialog box. A local attacker could issue a specially crafted text dialog box display request direct or via a custom application,...

Mandriva Linux Security Advisory : php (MDVSA-2009:247)

Multiple vulnerabilities was discovered and corrected in php : The dbareplace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service file truncation via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the...

MDVA-2009:169 : drakxtools

These updated packages fix a bug preventing the use of firefox if the user had seen the help of drak3d in the drak3d session before first running firefox bug 29775. These updated packages also adds support for VirtIO devices. Last but not least it ensures we have a recent enough perl-Gtk2 binding...

MDVA-2009:169-1 : drakxtools

These updated packages fix a bug preventing the use of firefox if the user had seen the help of drak3d in the drak3d session before first running firefox bug 29775. These updated packages also adds support for VirtIO devices. Last but not least it ensures we have a recent enough perl-Gtk2 binding...

MDVA-2009:170 : ldetect

This update fixes a very trivial issue with lspcidrake displaying warnings about some USB devices. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

Mandriva Linux Security Advisory : glib2.0 (MDVSA-2009:245)

A vulnerability was discovered and corrected in glib2.0 : The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the...