Mandriva Linux Security Advisory : cups (MDVSA-2008:211)

A buffer overflow in the SGI image format decoding routines used by the CUPS image converting filter imagetops was discovered. An attacker could create malicious SGI image files that could possibly execute arbitrary code if the file was printed CVE-2008-3639. An integer overflow flaw leading to a...

Mandriva Linux Security Advisory : php (MDVSA-2009:045)

A number of vulnerabilities have been found and corrected in PHP : improve mbflfiltconvhtmldecflush error handling in ext/mbstring/libmbfl/filters/mbfilterhtmlent.c CVE-2008-5557. Additionally on Mandriva Linux 2009.0 and up the php-mbstring module is linked against a separate shared libmbfl...

Mandriva Linux Security Advisory : postgresql (MDVSA-2008:004)

Index Functions Privilege Escalation CVE-2007-6600: as a unique feature, PostgreSQL allows users to create indexes on the results of user-defined functions, known as expression indexes. This provided two vulnerabilities to privilege escalation: 1 index functions were executed as the superuser and...

Mandriva Linux Security Advisory : openssh (MDVSA-2008:078)

OpenSSH allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Mandriva Linux Security Advisory : python-pycrypto (MDVSA-2009:050-1)

A vulnerability have been discovered and corrected in PyCrypto ARC2 module 2.0.1, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length CVE-2009-0544. The updated packages have been patched to prevent this. Update : The previous...

Mandriva Linux Security Advisory : php (MDVSA-2009:021)

A buffer overflow in the imageloadfont function in PHP allowed context-dependent attackers to cause a denial of service crash and potentially execute arbitrary code via a crafted font file CVE-2008-3658. A buffer overflow in the memnstr function allowed context-dependent attackers to cause a deni...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2008:206)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.17 CVE-2008-0016, CVE-2008-3835, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062, CVE-2008-4065, CVE-2008-4066, CVE-2008-4067, CVE-2008-4068,...

Mandriva Linux Security Advisory : php (MDVSA-2008:128)

A number of vulnerabilities have been found and corrected in PHP : php-cgi in PHP prior to 5.2.6 does not properly calculate the length of PATHTRANSLATED, which has unknown impact and attack vectors CVE-2008-0599. The escapeshellcmd API function in PHP prior to 5.2.6 has unknown impact and...

Mandriva Linux Security Advisory : pam (MDVSA-2009:077)

A security vulnerability has been identified and fixed in pam : Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and mig...

Mandriva Linux Security Advisory : bzip2 (MDVSA-2008:075)

Bzip2 versions before 1.0.5 are vulnerable to a denial of service attack via malicious compressed data. The updated packages have been patched to prevent the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Mandriva Linux Security Advisory : gnutls (MDVSA-2008:227-1)

Martin von Gagern found a flow in how GnuTLS versions 1.2.4 up until 2.6.1 verified certificate chains provided by a server. A malicious server could use this flaw to spoof its identity by tricking client applications that used the GnuTLS library to trust invalid certificates CVE-2008-4989. Updat...

Mandriva Linux Security Advisory : libxfont (MDVSA-2008:024)

A heap-based buffer overflow flaw was found in how the X.org server handled malformed font files that could allow a malicious local user to potentially execute arbitrary code with the privileges of the X.org server CVE-2008-0006. The updated packages have been patched to correct this issue...

Mandriva Linux Security Advisory : vorbis-tools (MDVSA-2008:093)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Linux Security Advisory : epiphany (MDVSA-2009:048-2)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Epiphany working directory CVE-2008-5985. This upda...

Mandriva Linux Security Advisory : squid (MDVSA-2008:134)

An incorrect fix for CVE-2007-6239 resulted in Squid not performing proper bounds checking when processing cache update replies. Because of this, a remote authenticated user might have been able to trigger an assertion error and cause a denial of service CVE-2008-1612. The updated packages have...

Mandriva Linux Security Advisory : libid3tag (MDVSA-2008:103)

field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service CPU and memory consumption via an ID3FIELDTYPESTRINGLIST field that ends in '', which triggers an infinite loop. The updated packages have been patched to correct this. %NASLMINLEVEL 70300 C...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:178)

Alin Rad Pop found an array index vulnerability in the SDP parser of xine-lib. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker could possibly execute arbitrary code with the privileges of the user using the program CVE-2008-0073. The ASF demuxer ...

Mandriva Linux Security Advisory : perl-MDK-Common (MDVSA-2009:072)

Some vulnerabilities were discovered and corrected in perl-MDK-Common : The functions used to write strings into shell like configuration files by Mandriva tools were not taking care of some special characters. This could lead to some bugs like wireless keys containing certain characters not...

Mandriva Linux Security Advisory : ImageMagick (MDVSA-2008:035)

Multiple vulnerabilities were discovered in the image decoders of ImageMagick. If a user or automated system were tricked into processing malicious DCM, DIB, XBM, XCF, or XWD images, a remote attacker could execute arbitrary code with user privileges. The updated packages have been patched to...

Mandriva Linux Security Advisory : pcre (MDVSA-2008:053)

A buffer overflow in PCRE 7.x before 7.6 allows remote attackers to execute arbitrary code via a regular expression that contains a character class with a large number of characters with Unicode code points greater than 255. The updated packages have been patched to correct these issues...