Mandriva Linux Security Advisory : zsh (MDVSA-2009:108-1)

A stack-based buffer overflow was found in the zsh command interpreter. An attacker could use this flaw to cause a denial of service zsh crash, when providing a specially crafted string as input to the zsh shell. The updated packages have been patched to prevent this. Update : Packages for 2008.0...

MDVA-2009:104 : fuse

FUSE default setup was requiring non privileged users to be added manually to fuse group to be able to use fuse feature and this feature was not available immediatly after fuse package installation. This package updates ensure fuse is now immediatly available after package installation and for al...

Mandriva Linux Security Advisory : libwmf (MDVSA-2009:106-1)

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file CVE-2009-1364. The updated packages have been patched to prevent this. Update :...

MDVA-2009:058 : SDL12

The SDL12 package shipped in 2008.1 and 2009.0 have a bug which will cause segment fault error on some games such as ri-li. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Linux Security Advisory : memcached (MDVSA-2009:105)

The processstat function in Memcached prior 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port CVE-2009-1255, CVE-2009-1494. The updated...

Mandriva Linux Security Advisory : udev (MDVSA-2009:103-1)

Security vulnerabilities have been identified and fixed in udev. udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space CVE-2009-1185. Buffer overflow in the utilpathencode...

Mandriva Linux Security Advisory : xpdf (MDVSA-2009:101)

Multiple buffer overflows in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0146. Multiple integer overflows in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0147. An integ...

Mandrake Security Advisory MDVSA-2009:095 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:095. OpenVAS Vulnerability Test $Id: mdksa2009095.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:095 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009...

MDVA-2009:055 : webmin

Webmin shipped with Mandriva Linux 2009.0 used crypt method for password creation, which prevented usage of passwords longer than 8 character. This update configures webmin to create MD5 passwords for new users by default. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

MDVA-2009:054 : iproute2

iproute2 package shipped with Mandriva Linux 2009.0 installed outdated manual pages. This update installs correct manual pages instead. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Mandriva Linux Security Advisory : clamav (MDVSA-2009:097)

Multiple vulnerabilities has been found and corrected in clamav : Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive CVE-2009-1241. libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:095)

A buffer underflow in Ghostscript's CCITTFax decoding filter allows remote attackers to cause denial of service and possibly to execute arbitrary by using a crafted PDF file CVE-2007-6725. Buffer overflow in Ghostscript's BaseFont writer module allows remote attackers to cause a denial of service...

MDVA-2008:064 : draksnapshot

This update fixes a few issues in draksnapshot. It prevents the applet from crashing if DBUS is not accessible bug 40031. The applet will also now ignore the root disc, if it's USB. The configurator will now prevent to recursively backup the backup directory bug 39801. Last but not least, it will...

MDVA-2008:070 : dkms

The dkms-minimal package in Mandriva Linux 2008 Spring did not require lsb-release. If lsb-release was not installed, the dkms modules were installed in the standard location, instead of the intended /dkms or /dkms-binary. This update fixes that issue. Due to another bug, dkms would consider olde...

MDVA-2009:005 : x11-server

This updated x11-server-xorg package provides the following fixes: The OpenOffice.org application menu would trigger a bug in the X server's xkb cache code causing it to crash segfault. Fake key events generated by the XTest extension would not change the state of the keyboard leds. This would...

MDVA-2009:011 : kdegraphics4

This package updates the libkdraw and libkexiv2 libraries making it possible to build newer versions of digikam. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDVA-2008:187 : evolution

Several feature bugfixes and stability fixes from GNOME 2.22.3 are provided by this package update, as well as translation updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:033 : tomboy

The synchronization feature in Tomboy would sometimes delete the wrong note. This update fixes the synchronization logic. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDVA-2008:111 : dbus

A race condition was preventing dbus from starting correctly when user authentication was network based LDAP, etc.. This could prevent other desktop functions from working properly, such as device automounting. This update provides updated dbus and initscript packages that fix this issue. Both...

MDVA-2008:109 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2008 and later for certain time zones. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecat...