Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:178)

Alin Rad Pop found an array index vulnerability in the SDP parser of xine-lib. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker could possibly execute arbitrary code with the privileges of the user using the program CVE-2008-0073. The ASF demuxer ...

Mandriva Linux Security Advisory : sudo (MDVSA-2009:033)

A vulnerability has been identified in sudo which allowed - depending on the sudoers rules - a sudo-user to execute arbitrary shell commands as root CVE-2009-0034. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2009:006)

Heap-based overflow on functions to manipulate WMF and EMF files in OpenOffice.org documments enables remote attackers to execute arbitrary code on documments holding certain crafted either WMF or EMF files CVE-2008-2237 CVE-2008-2238. This update provide the fix for these security issues and...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:228)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 2.x, version 2.0.0.18 CVE-2008-0017, CVE-2008-5012, CVE-2008-5013, CVE-2008-5014, CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021, CVE-2008-5022, CVE-2008-5023, CVE-2008-5024, CVE-2008-5052. This...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2009:012)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.19 CVE-2008-5500, CVE-2008-5503, CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510, CVE-2008-5511, CVE-2008-5512. This update provides the latest Thunderbird t...

Mandriva Linux Security Advisory : pcre (MDVSA-2008:053)

A buffer overflow in PCRE 7.x before 7.6 allows remote attackers to execute arbitrary code via a regular expression that contains a character class with a large number of characters with Unicode code points greater than 255. The updated packages have been patched to correct these issues...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:226)

A denial of service condition was found in Ruby's regular expression engine. If a Ruby script tried to process a large amount of data via a regular expression, it could cause Ruby to enter an infinite loop and crash CVE-2008-3443. A number of flaws were found in Ruby that could allow an attacker ...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2008:206)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.17 CVE-2008-0016, CVE-2008-3835, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062, CVE-2008-4065, CVE-2008-4066, CVE-2008-4067, CVE-2008-4068,...

Mandriva Linux Security Advisory : mysql (MDVSA-2008:028)

The mysqlchangedb function in MySQL 5.0.x before 5.0.40 did not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allowed remote authenticated users to gain privileges CVE-2007-2692. The federated engine in MySQL 5.0.x, when performing a certain SHOW...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:242)

Two vulnerabilities were discovered in Wireshark. The first is a vulnerability in the SMTP dissector that could cause it to consume excessive CPU and memory via a long SMTP request CVE-2008-5285. The second is an issue with the WLCCP dissector that could cause it to go into an infinite loop. This...

Mandriva Linux Security Advisory : icu (MDVSA-2008:026)

Will Drewry reported multiple flaws in how libicu processed certain malformed regular expressions. If an application linked against libicu, such as OpenOffice.org, processed a carefully-crafted regular expression, it could potentially cause the execution of arbitrary code with the privileges of t...

Mandriva Linux Security Advisory : exiv2 (MDVSA-2008:006)

An integer overflow in the Exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : cups (MDVSA-2009:027)

A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file CVE-2009-0032. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:048)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.12. This update provides the latest Firefox to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2009:019)

A vulnerability have been discovered in the load function of the XPM loader for imlib2, which allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file CVE-2008-5187. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C...

MDVA-2008:141 : mdkonline

This update ensures distribution upgrade notification is not detected in incorrect cases and the distribution upgrade confirmation dialog is not displayed after security updates are applied. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently ...

MDVA-2008:167 : libtool

The libtool package shipped with Mandriva Linux 2009 was built with an older version of GCC, and was built in a such a way that it depended on the specific version of GCC it was built with when linking against GCC internals. The updated package is built with the current GCC in Mandriva Linux 2009...

MDVA-2008:173 : imwheel

Under certain conditions, imwheel would enter an infinite loop and force the X server to consume a lot of CPU time, rendering the system unusable. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDVA-2008:155 : kdebase4-runtime

When an attachment file is opened in a KDE4 application, it is copied to a temporary directory and opened by a 'kioexec' process. When you close the application, the 'kioexec' process should automatically close after some minutes of inactivity in the temporary file. The kdebase4-runtime package...

MDVA-2008:107 : myspell-dictionaries

Some thesaurus files of some languages were not properly working witn Mandriva Linux 2008.1. The thesaurus would not bring out the meaning and synonym for any searched word for the following languages: American English, Spanish, French, German, Polish, Czeck, Slovakian, and Hungarian. This releas...