Mandriva Linux Security Advisory : pulseaudio (MDVSA-2009:152)

A vulnerability has been found and corrected in pulseaudio : Tavis Ormandy and Julien Tinnes of the Google Security Team discovered that pulseaudio, when installed setuid root, does not drop privileges before re-executing itself to achieve immediate bindings. This can be exploited by a user who h...

Mandriva Linux Security Advisory : dhcp (MDVSA-2009:154)

A vulnerability has been found and corrected in ISC DHCP : ISC DHCP Server is vulnerable to a denial of service, caused by the improper handling of DHCP requests. If the host definitions are mixed using dhcp-client-identifier and hardware ethernet, a remote attacker could send specially crafted...

Mandriva Linux Security Advisory : perl-Compress-Raw-Zlib (MDVSA-2009:157-1)

A vulnerability has been found and corrected in perl-Compress-Raw-Zlib : Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of servi...

Mandriva Linux Security Advisory : dhcp (MDVSA-2009:153)

A vulnerability has been found and corrected in ISC DHCP : Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0....

Mandriva Linux Security Advisory : dhcp (MDVSA-2009:151)

A vulnerability has been found and corrected in ISC DHCP : Stack-based buffer overflow in the scriptwriteparams method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a...

Mandriva Linux Security Advisory : libtiff (MDVSA-2009:150)

Multiple vulnerabilities has been found and corrected in libtiff : Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327 CVE-2009-2285. Fix...

Mandriva Linux Security Advisory : apache (MDVSA-2009:149)

Multiple vulnerabilities has been found and corrected in apache : The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length...

MDVA-2009:127 : digikam

With the last major KDE4 upgrade in Mandriva 2009 digikam stopped to work, this update rebuilds digikam to the new Qt4 version making digikam work again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/0...

MDVA-2009:122 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain new Daylight Savings Time information and Time Zone information for some locations. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecate...

[Full-disclosure] [ MDVSA-2009:145 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:145 http://www.mandriva.com/security/ Package : php Date : June 28, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 4.0 Problem Description: A vulnerability has been found and corrected in PHP: - Fixed...

Mandriva Linux Security Advisory : php (MDVSA-2009:145)

A vulnerability has been found and corrected in PHP : - Fixed upstream bug 48378 exifreaddata segfaults on certain corrupted .jpeg files CVE-2009-2687. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

MDVA-2009:118-1 : kde4

Mandriva Linux 2009 was released with KDE4 version 4.1. This update upgrades KDE4 in Mandriva Linux 2009 to version 4.2, which brings many bugfixes and overall improvements. Update: The previous kde4 update added additional dependencies that was not fulfilled. This fixes the update, which would n...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:144)

Multiple security vulnerabilities has been identified and fixed in ghostscript : Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation CVE-2008-3520. Buffer...

Mandriva Linux Security Advisory : jasper (MDVSA-2009:142-1)

Multiple security vulnerabilities has been identified and fixed in jasper : The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2009:141)

A number of security vulnerabilities have been discovered for Mozilla Thunderbird version 2.0.0.21 CVE-2009-1302, CVE-2009-1303, CVE-2009-1304, CVE-2009-1305, CVE-2009-1306, CVE-2009-1307, CVE-2009-1308, CVE-2009-1309, CVE-2009-2210, CVE-2009-1392, CVE-2009-1832, CVE-2009-1833, CVE-2009-1838,...

MDVA-2009:118 : kde4

Mandriva Linux 2009 was released with KDE4 version 4.1. This update upgrades KDE4 in Mandriva Linux 2009 to version 4.2, which brings many bugfixes and overall improvements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDVA-2009:112 : drakx-net

In some cases, the wpasupplicant configuration file would not be read correctly by drakx-net, mostly with WPA-Enterprise networks. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:135)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The selinuxippostrouteiptablescompat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compatnet is enabled, omits calls to avchasperm...

[ MDVSA-2009:133 ] irssi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:133 http://www.mandriva.com/security/ Package : irssi Date : June 16, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 3.0 Problem Description: A vulnerability has been found and corrected in irssi: Off-by-o...

Mandriva Linux Security Advisory : irssi (MDVSA-2009:133-1)

A vulnerability has been found and corrected in irssi : Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer...