Mandriva Linux Security Advisory : zsh (MDVSA-2009:108-1)

A stack-based buffer overflow was found in the zsh command interpreter. An attacker could use this flaw to cause a denial of service zsh crash, when providing a specially crafted string as input to the zsh shell. The updated packages have been patched to prevent this. Update : Packages for 2008.0...

MDVA-2009:104 : fuse

FUSE default setup was requiring non privileged users to be added manually to fuse group to be able to use fuse feature and this feature was not available immediatly after fuse package installation. This package updates ensure fuse is now immediatly available after package installation and for al...

Mandriva Linux Security Advisory : libwmf (MDVSA-2009:106-1)

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file CVE-2009-1364. The updated packages have been patched to prevent this. Update :...

MDVA-2009:058 : SDL12

The SDL12 package shipped in 2008.1 and 2009.0 have a bug which will cause segment fault error on some games such as ri-li. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Linux Security Advisory : memcached (MDVSA-2009:105)

The processstat function in Memcached prior 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port CVE-2009-1255, CVE-2009-1494. The updated...

Mandriva Linux Security Advisory : udev (MDVSA-2009:103-1)

Security vulnerabilities have been identified and fixed in udev. udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space CVE-2009-1185. Buffer overflow in the utilpathencode...

Mandriva Linux Security Advisory : xpdf (MDVSA-2009:101)

Multiple buffer overflows in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0146. Multiple integer overflows in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0147. An integ...

Mandrake Security Advisory MDVSA-2009:095 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:095. OpenVAS Vulnerability Test $Id: mdksa2009095.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:095 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009...

MDVA-2009:054 : iproute2

iproute2 package shipped with Mandriva Linux 2009.0 installed outdated manual pages. This update installs correct manual pages instead. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Mandriva Linux Security Advisory : clamav (MDVSA-2009:097)

Multiple vulnerabilities has been found and corrected in clamav : Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive CVE-2009-1241. libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of...

MDVA-2009:055 : webmin

Webmin shipped with Mandriva Linux 2009.0 used crypt method for password creation, which prevented usage of passwords longer than 8 character. This update configures webmin to create MD5 passwords for new users by default. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:095)

A buffer underflow in Ghostscript's CCITTFax decoding filter allows remote attackers to cause denial of service and possibly to execute arbitrary by using a crafted PDF file CVE-2007-6725. Buffer overflow in Ghostscript's BaseFont writer module allows remote attackers to cause a denial of service...

MDVA-2008:175 : urpmi

Since version 6.14.9 Urpmi would spontaneously un-ignore any updated medias. This update fixes that regression. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDKA-2007:026 : krb5

The krb5 packages provided with Mandriva Linux 2007.1 had a compilation problem where the kerberos utilities were looking for modules in the wrong location. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

MDKA-2007:046 : arts

The esd output support was not built in the Mandriva Linux 2007.1 arts package, while it was enabled in previous Mandriva Linux releases. This update package re-enables esd output support in arts. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDVA-2009:048 : evolution

This update prevents unwanted dependency with gpilotd bug 46302. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

MDVA-2008:122 : vpnc

The vpnc package that shipped with Mandriva Linux 2008.1 was missing the cisco-decrypt binary, which is used for converting Cisco VPN client profile files encrypted passwords. As a result, any call to pcf2vpnc failed due to the missing binary. This update provides the missing binary. %NASLMINLEVE...

MDVA-2008:184 : kdevelop

KDevelop as shipped in Mandriva Linux 2009.0 contains a build time bug, which led to subversion support not being correctly compiled. As a result, it was not possible to use subversion as the version control system for projects in KDevelop. The updated package fixes this problem. %NASLMINLEVEL...

MDVA-2008:106-1 : openoffice.org-voikko

openoffice.org-voikko provides Finnish spellchecker and hyphenator component for OpenOffice.org. The package is being updated for the new OpenOffice.org version. Update: Due to a build error, the previous update for i586 architecture was built against the old OpenOffice.org. This update fixes tha...

MDVA-2008:051 : silc-toolkit

The silc libraries for Mandriva Linux 2008.1 contained an obsolete patch for a bug that was already fixed, preventing the libraries from connecting to the silc network. This update removes the obsolete patch, restoring correct functionality of the libraries. %NASLMINLEVEL 70300 @DEPRECATED@ This...