MDVA-2009:166 : setup

There was a small typo in /etc/services conserning the xmpp services. This update addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script...

MDVA-2009:168 : rrdtool

This update addresses a problem where rrdtool-1.3.x required a font installed like for example the DejaVuSansMono.ttf font. A dependency was added on fonts-ttf-dejavu to address this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

[ MDVSA-2009:241 ] squid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:241 http://www.mandriva.com/security/ Package : squid Date : September 22, 2009 Affected: Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: A vulnerability was discovered and...

MDVA-2009:165 : cfengine

The 'recurse' keyword in any editfile action trigger the following warning, for each file found: cfengine:hostname: Unknown action in editing of file XYZ. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Mandriva Linux Security Advisory : dovecot (MDVSA-2009:242)

A vulnerability was discovered and corrected in dovecot : Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:238)

Multiple vulnerabilities was discovered and corrected in openssl : Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impa...

Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2009:234-2)

Multiple vulnerabilities was discovered and corrected in silc-toolkit : Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format...

Mandrake Security Advisory MDVSA-2009:197-2 (nss)

The remote host is missing an update to nss announced via advisory MDVSA-2009:197-2. OpenVAS Vulnerability Test $Id: mdksa20091972.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:197-2 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Linux Security Advisory : libsamplerate (MDVSA-2009:232-1)

A security vulnerability has been identified and fixed in libsamplerate : Lev Givon discovered a buffer overflow in libsamplerate that could lead to a segfault with specially crafted python code. This problem has been fixed with libsamplerate-0.1.7 but older versions are affected. This update...

[ MDVSA-2009:231 ] htmldoc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:231 http://www.mandriva.com/security/ Package : htmldoc Date : September 11, 2009 Affected: 2009.0, 2009.1, Corporate 4.0 Problem Description: A security vulnerability has been identified and fixed in htmldo...

Mandriva Linux Security Advisory : pidgin (MDVSA-2009:230)

Security vulnerabilities has been identified and fixed in pidgin : The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of...

Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2009:229-1)

A vulnerability has been found and corrected in cyrus-imapd : Buffer overflow in the SIEVE script component sieve/script.c in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14 allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related t...

Mandriva Linux Security Advisory : htmldoc (MDVSA-2009:231-1)

A security vulnerability has been identified and fixed in htmldoc : Buffer overflow in the setpagesize function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were...

MDVA-2009:159 : hplip

This update resolves a runtime error with hplip found after the KDE4 updates and in conjunction with the newer python-qt4-gui package. This version upgrade provides hplip v3.9.2 that addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch i...

[ MDVSA-2009:226 ] aria2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:226 http://www.mandriva.com/security/ Package : aria2 Date : September 9, 2009 Affected: 2009.0, 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in aria2: aria...

Mandriva Linux Security Advisory : aria2 (MDVSA-2009:226)

A vulnerability has been found and corrected in aria2 : Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors CVE-2009-3575. This update provid...

[ MDVSA-2009:226 ] freeradius

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:226 http://www.mandriva.com/security/ Package : freeradius Date : September 10, 2009 Affected: Corporate 4.0 Problem Description: A vulnerability has been found and corrected in freeradius: The raddecode...

Mandriva Linux Security Advisory : qt4 (MDVSA-2009:225)

A vulnerability has been found and corrected in qt4 : src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary S...

[ MDVSA-2009:225 ] qt4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:225 http://www.mandriva.com/security/ Package : qt4 Date : September 8, 2009 Affected: 2009.0, 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in qt4:...

[ MDVSA-2009:223 ] xerces-c

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:223 http://www.mandriva.com/security/ Package : xerces-c Date : August 30, 2009 Affected: 2008.1, 2009.0, 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in...