[Full-disclosure] [ MDKSA-2007:122 ] - Updated gd packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:122 http://www.mandriva.com/security/ Package : gd Date : June 13, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A flaw in libgd2 was found by Xavier Roche where it would n...

[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:097 http://www.mandriva.com/security/ Package : xscreensaver Date : May 2, 2007 Affected: 2007.0, 2007.1, Corporate 3.0 Problem Description: A problem with the way xscreensaver verifies user passwords was...

MDKA-2007:025 : x11-data-xkbdata

The x11-data-xkbdata package had an error on the default qwertz romainian layout making it impossible to load; this is now corrected. As well, the tifinagh layouts were missing and have been included with this update. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Mandrake Linux Security Advisory : tightvnc (MDKSA-2007:080-1)

Local exploitation of a memory corruption vulnerability in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server, typically root. The vulnerability exists in the ProcXCMiscGetXIDList function in the XC-MISC extension. This request is used...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2007:079-1)

Local exploitation of a memory corruption vulnerability in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server, typically root. The vulnerability exists in the ProcXCMiscGetXIDList function in the XC-MISC extension. This request is used...

[ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:068 http://www.mandriva.com/security/ Package : squid Date : March 22, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Due to an internal error...

MDKA-2007:018-1 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2007 for certain time zones. These updated packages contain the new information. Update: This update addresses timezone files such as Canada/Mountain tha...

[ MDKSA-2007:045 ] - Updated gnomemeeting packages fix string vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:045 http://www.mandriva.com/security/ Package : gnomemeeting Date : February 21, 2007 Affected: Corporate 3.0 Problem Description: A format string flaw was discovered in how GnomeMeeting processes certain...

MDKA-2007:014 : mandriva-doc

Due to changes in the structure of the documentation, the Help buttons of the Software Management tools led to broken links. This update fixes the links catalog system so the inline help works again. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDKA-2006:037 : glibc

Updated glibc packages are being provided to ensure that kernel and user-space tools are in sync. This update also fixes a bug present on x8664 platforms where strncmp is mis-optimized. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDKA-2007:011 : tripwire

The version of tripwire included with Mandriva 2007 would hang while generating keys. The problem has been corrected by avoiding using optimization at compile-time. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled ...

MDKA-2006:041 : smbldap-tools

This update fixes a problem with the smbldap-tools package shipped with Mandriva Linux 2006 where it would issue warnings if the smb.conf configuration file had continuation lines using the '' character. The updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has be...

MDKA-2005:050 : scim-qtimm

Due to a bug in the RPM requires for the scim-qtimm package, it was only installable on i586 platforms, and not on x8664 due to differences in the naming for libqt3 vs. lib64qt3. This update corrects the requires allowing the package to be installed on Mandriva Linux 2006/x8664. %NASLMINLEVEL...

MDKA-2006:020 : libaio

The libaio package is being made available as an official/main package to provide out-of-the-box support for Oracle Express in Mandriva Linux 2006. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDKA-2005:047 : apcupsd

The apcupsd package as shipped with Mandriva Linux 2006 was missing the main apcupsd configuration file. As a result, those upgrading from earlier versions would have their existing configuration file moved to /etc/apcupsd/apcupsd.conf.rpmsave with no new configuration file to replace it, which...

MDKA-2006:050 : ical

The Ical package in Mandriva Linux 2007 fails to run due to old code that does not work with current versions of TCL. Additionally, the application did not appear in the menu and the URL was obsolete. This updated package fixes these issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2007:005 : nmap

The version of nmap shipped with Mandriva Linux 2007 was built against the system copies of the libpcap and libdnet libraries. However, nmap actually requires changes to be made to these libraries which have not yet been made to the upstream versions, and consequently should be compiled against i...

MDKA-2006:053 : dbus

On Mandriva Linux 2007.0, the path for D-Bus system bus socket was not following D-Bus specification. This could cause some implementation of the D-Bus specification to not detect the system bus correctly. This updated package ensures the location of the system bus is exported through...

Mandrake Linux Security Advisory : libgsf (MDKSA-2006:220)

'infamous41md' discovered a heap buffer overflow vulnerability in libgsf, a GNOME library for reading and writing structured file formats, which could lead to the execution of arbitrary code. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable Network...

[ MDKSA-2007:028 ] - Updated ulogd packaged to address buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:028 http://www.mandriva.com/security/ Package : ulogd Date : January 26, 2007 Affected: Corporate 4.0 Problem Description: Buffer overflow in ulogd has unknown impact and attack vectors related to "improper...