[ MDKSA-2007:021 ] - Updated xpdf packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:021 http://www.mandriva.com/security/ Package : xpdf Date : January 18, 2007 Affected: 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1...

[ MDKSA-2007:022 ] - Updated tetex packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:022 http://www.mandriva.com/security/ Package : tetex Date : January 18, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xp...

[ MDKSA-2007:019 ] - Updated pdftohtml packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:019 http://www.mandriva.com/security/ Package : pdftohtml Date : January 18, 2007 Affected: 2006.0, 2007.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in...

Neon LibNeon非ASCII字符URI数据远程拒绝服务漏洞

Neon LibNeon存在远程拒绝服务问题。 Neon LibNeon当处理包含非ASCII字符的URI数据时存在漏洞，攻击者可以利用漏洞使使用此库的应用程序崩溃，造成拒绝服务攻击。 Neon Client Library 0.26.2 Neon Client Library 0.26.1 Neon Client Library 0.26 MandrakeSoft Linux Mandrake 2007.0 x8664 MandrakeSoft Linux Mandrake 2007.0 Mandriva Linux可参考如下公告：...

[ MDKSA-2007:017 ] - Updated wget packages fix ftp vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:017 http://www.mandriva.com/security/ Package : wget Date : January 15, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: The ftpsyst function in...

[ MDKSA-2007:004 ] - Updated geoip packages fix geoipupdate vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:004 http://www.mandriva.com/security/ Package : geoip Date : January 8, 2007 Affected: Corporate 4.0 Problem Description: Dean Gaudet discovered the geoipupdate utility fails to do sanity checking on the...

[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:233 http://www.mandriva.com/security/ Package : dbus Date : December 18, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability was discovered in D-Bus that could be...

[ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:227 http://www.mandriva.com/security/ Package : kdegraphics Date : December 11, 2006 Affected: 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Stack overflow in the KFILE JPEG kfilejpeg plugin in...

[ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:225 http://www.mandriva.com/security/ Package : ruby Date : December 6, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Another vulnerability has been discovered in the CGI...

[ MDKSA-2006:210 ] - Updated syslinux packages to fix embedded libpng vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:210 http://www.mandriva.com/security/ Package : syslinux Date : November 16, 2006 Affected: 2007.0 Problem Description: SYSLINUX is a boot loader for the Linux operating system which operates off an...

[ MDKSA-2006:213 ] - Updated chromium packages to fix embedded libpng vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:213 http://www.mandriva.com/security/ Package : chromium Date : November 16, 2006 Affected: 2007.0, Corporate 3.0 Problem Description: Chromium is an OpenGL-based shoot them up game with fine graphics. It is...

[ MDKSA-2006:212 ] - Updated doxygen packages to fix embedded libpng vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:212 http://www.mandriva.com/security/ Package : doxygen Date : November 16, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Doxygen is a documentation system for C, C++ and...

[ MDKSA-2006:189 ] - Updated xsupplicant fixes possible remote root stack smash vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:189 http://www.mandriva.com/security/ Package : xsupplicant Date : October 27, 2006 Affected: 2006.0, 2007.0 Problem Description: Yannick Van Osselaer discovered a stack overflow in Xsupplicant, which could...

[Full-disclosure] [ MDKSA-2006:180 ] - Updated php packages fix integer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:180 http://www.mandriva.com/security/ Package : php Date : October 5, 2006 Affected: 2006.0, 2007.0 Problem Description: An integer overflow was discovered in the PHP memory handling routines. If a script ca...

[Full-disclosure] [ MDKSA-2006:162 ] - Updated php packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:162 http://www.mandriva.com/security/ Package : php Date : September 7, 2006 Affected: 2006.0, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The 1 fileexists and 2 imapreopen functions in PH...

[ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:140 http://www.mandriva.com/security/ Package : ncompress Date : August 9, 2006 Affected: 2006.0, Corporate 3.0 Problem Description: Tavis Ormandy, of the Google Security Team, discovered that ncompress, whe...

[UNIX] Liblesstif Local Root (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[ MDKSA-2006:128 ] - Updated wireshark packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:128 http://www.mandriva.com/security/ Package : wireshark Date : July 18, 2006 Affected: 2006.0 Problem Description: A number of vulnerabilities have been discovered in the Wireshark formerly Ethereal networ...

Mandrake Linux Security Advisory : mutt (MDKSA-2006:115)

A stack-based buffer overflow in the browsegetnamespace function in imap/browse.c of Mutt allows remote attackers to cause a denial of service crash or execute arbitrary code via long namespaces received from the IMAP server. Updated packages have been patched to address this issue. %NASLMINLEVEL...

[Full-disclosure] [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:112 http://www.mandriva.com/security/ Package : gd Date : June 27, 2006 Affected: 10.2, 2006.0 Problem Description: The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics dra...