Mandriva Linux Security Advisory : libsoup (MDVSA-2009:081)

An integer overflow in libsoup Base64 encoding and decoding functions enables attackers either to cause denial of service and to execute arbitrary code CVE-2009-0585. This update provides the fix for that security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Mandriva Linux Security Advisory : cups (MDVSA-2008:081)

A heap-based buffer overflow in CUPS 1.2.x and later was discovered by regenrecht of VeriSign iDenfense that could allow a remote attacker to execute arbitrary code via a crafted CGI search expression CVE-2008-0047. A validation error in the Hp-GL/2 filter was also discovered CVE-2008-0053...

Mandriva Linux Security Advisory : SDL_image (MDVSA-2008:040)

The LWZReadByte and IMGLoadLBMRW functions in SDLimage contain a boundary error that could be triggered to cause a static buffer overflow and a heap-based buffer overflow. If a user using an application linked against the SDLimage library were to open a carefully crafted GIF or IFF ILBM file, the...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:015)

Several vulnerabilities have been discovered in ffmpeg, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESIZE value CVE-2008-4867. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : curl (MDVSA-2009:069)

A security vulnerability has been identified and fixed in curl, which could allow remote HTTP servers to 1 trigger arbitrary requests to intranet servers, 2 read or overwrite arbitrary files via a redirect to a file: URL, or 3 execute arbitrary commands via a redirect to an scp: URL CVE-2009-0037...

Mandriva Linux Security Advisory : python-django (MDVSA-2008:185)

A cross-site request forgery vulnerability was discovered in Django that, if exploited, could be used to perform unrequested deletion or modification of data. Updated versions of Django will now discard posts from users whose sessions have expired, so data will need to be re-entered in these case...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:020)

Two vulnerabilities discovered in xine-lib allow remote execution of arbitrary code : Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the...

Mandriva Linux Security Advisory : virtualbox (MDVSA-2009:011)

A vulnerability have been discovered and corrected in VirtualBox, affecting versions prior to 2.0.6, which allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-qateam-ipc/lock temporary file CVE-2008-5256. The updated packages have been patched to prevent this...

Mandriva Linux Security Advisory : lynx (MDVSA-2008:218)

A vulnerability was found in the Lynxcgi: URI handler that could allow an attacker to create a web page redirecting to a malicious URL that would execute arbitrary code as the user running Lynx, if they were using the non-default Advanced user mode CVE-2008-4690. This update corrects these issues...

MDVA-2008:159 : curl

An idiosyncratic feature of the Turkish language is that the letter 'i' in Turkish is not the lower-case version of the letter 'I'. This issue breaks standard POSIX string case comparison on strings containing the character 'i'. This issue affected the curl package shipped with Mandriva Linux 200...

MDVA-2008:197 : mandriva-kde-config

On Mandriva Linux 2009.0, every time a web page was opened under Konqueror, or opened in a new tab, it showed the HTML code in an editor instead of the website. This update makes Konqueror display websites correctly instead of pure HTML code. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...

MDKA-2007:062 : rpmdrake

The rpmdrake package, which provides the graphical software installation and update tools rpmdrake, drakrpm-edit-media and MandrivaUpdate, included with Mandriva Linux 2007 Spring contains several bugs. These include: When installing software with rpmdrake, if packages are selected for installati...

MDVA-2009:001-1 : dos2unix

The dos2unix command removes the last line of a file if no newline characters follow. This package fixes the issue. Update: This update now provides corrected packages for Mandriva Linux 2008.x and Corporate Server 4.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

MDVA-2008:186 : evolution

Outgoing mails sent through the Evolution Exchange plugin were not always sent properly. Spell checking was not working properly when two different languages were enabled, causing all words to be detected as mistyped. Those bugs are fixed by this package updates, as well as massive performance...

MDVA-2008:138 : mdkonline

The updated mdkonline package improves the upgrade process to Mandriva Linux 2009.0 and includes many other bugfixes and enhancements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Networ...

MDVA-2009:026-1 : samba

This update fixes two minor issues with samba. Package does not install from update because of missing dependency 47979. Fix dependencies because /usr/include/tdb.h was moved from libsmbclient0-devel to libtdb-devel and this led to a file conflict and prevented a smooth upgrade. This update fixes...

MDKA-2007:108 : kdetoys

The kdetoys package, as released with Mandriva Linux 2008.0, missed some binaries required by the KWeather Kicker applet, preventing KWeather to be used. This update package fixes the issue by installing the missing binaries. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as th...

MDVA-2008:193 : kernel-headers

This update provides the latest headers exported by kernel 2.6.27.5-2mnb2 which includes a fix for building some samba versions. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2008:185 : kde4

Mandriva Linux 2009.0 shipped with KDE 4.1.2. This update provides the full KDE 4.1.3 for Mandriva Linux 2009.0 which brings with it numerous enhancements and bugfixes. Please note: the package list looks empty in this advisory due to the fact this update provides over 900 packages. The web...

MDVA-2009:036 : postfix

Postfix as shipped with Mandriva Linux 2009.0 fails to install if rsyslog logging daemon is installed. This updated package adds support for correct Postfix integration with rsyslog. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a securi...