[ MDVSA-2009:223 ] xerces-c

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:223 http://www.mandriva.com/security/ Package : xerces-c Date : August 30, 2009 Affected: 2008.1, 2009.0, 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in...

Mandriva Linux Security Advisory : postfix (MDVSA-2009:224-1)

A vulnerability has been found and corrected in postfix : Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user's...

Mandriva Linux Security Advisory : xerces-c (MDVSA-2009:223-1)

A vulnerability has been found and corrected in xerces-c : Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid...

MDVA-2009:154 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain new Daylight Savings Time information and Time Zone information for some locations. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecate...

[ MDVSA-2009:221 ] libneon0.27

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:221 http://www.mandriva.com/security/ Package : libneon0.27 Date : August 24, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has bee...

Mandriva Linux Security Advisory : kompozer (MDVSA-2009:219-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. Additionally on 2009.0 a patch was added to prevent kompozer from crashing 44830, on 2009.1 a format string patch was...

Mandriva Linux Security Advisory : davfs (MDVSA-2009:220-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

Mandriva Linux Security Advisory : w3c-libwww (MDVSA-2009:218-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2009:221)

Multiple vulnerabilities has been found and corrected in libneon0.27 : neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

MDVA-2009:152 : iptables

This is a version update of iptables 1.4.1.1 to 1.4.2 and is provided to support all new features of the 2.6.27 kernel. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

Mandriva Linux Security Advisory : audacity (MDVSA-2009:215-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

Mandriva Linux Security Advisory : wxgtk (MDVSA-2009:213-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

Mandriva Linux Security Advisory : libgadu (MDVSA-2009:208-1)

A vulnerability has been found and corrected in libgadu : libgadu before 1.8.2 allows remote servers to cause a denial of service crash via a contact description with a large length, which triggers a buffer over-read CVE-2008-4776. This update provides a solution to this vulnerability. Update :...

Mandriva Linux Security Advisory : expat (MDVSA-2009:211-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:210)

A vulnerability have been discovered and corrected in GnuTLS before 2.8.2, which could allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority CVE-2009-2730. This update fixes this vulnerability. %NASLMINLEVEL 70300...

Mandriva Linux Security Advisory : python-celementtree (MDVSA-2009:214)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2009:217-3)

A number of security vulnerabilities have been discovered in Mozilla Thunderbird : Security issues in thunderbird could lead to a man-in-the-middle attack via a spoofed X.509 certificate CVE-2009-2408. A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be...

Mandriva Linux Security Advisory : python (MDVSA-2009:212-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

[ MDVSA-2009:207 ] perl-Compress-Raw-Bzip2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:207 http://www.mandriva.com/security/ Package : perl-Compress-Raw-Bzip2 Date : August 19, 2009 Affected: 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:205)

A vulnerability was discovered and corrected in the Linux 2.6 kernel : The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in protoops structures, which allows local users to trigger a NULL pointer dereference and ga...