[Full-disclosure] [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:114 http://www.mandriva.com/security/ Package : libwmf Date : June 27, 2006 Affected: 10.2, 2006.0, Corporate 3.0 Problem Description: Integer overflows were reported in the GD Graphics Library libgd 2.0.28,...

[Full-disclosure] [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:113 http://www.mandriva.com/security/ Package : tetex Date : June 27, 2006 Affected: 10.2, 2006.0 Problem Description: Integer overflows were reported in the GD Graphics Library libgd 2.0.28, and possibly...

[ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:110 http://www.mandriva.com/security/ Package : gnupg Date : June 20, 2006 Affected: 10.2, 2006.0, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: A vulnerability was discovered in GnuPG 1.4.3...

Mandrake Linux Security Advisory : php (MDKSA-2006:063)

A vulnerability was discovered where the htmlentitydecode function would return a chunk of memory with length equal to the string supplied, which could include php code, php ini data, other user data, etc. Note that by default, Corporate 3.0 and Mandriva Linux LE2005 ship with magicquotesgpc on...

[ MDKSA-2006:061 ] - Updated mailman packages fix DoS from badly formed mime multipart messages.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:061 http://www.mandriva.com/security/ Package : mailman Date : March 29, 2006 Affected: 10.2, Corporate 3.0 Problem Description: Scrubber.py, in Mailman 2.1.5 and earlier, when using email 2.5 part of Python...

[ MDKSA-2006:057 ] - Updated cairo packages to address Evolution DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:057 http://www.mandriva.com/security/ Package : cairo Date : March 20, 2006 Affected: 2006.0 Problem Description: GNOME Evolution allows remote attackers to cause a denial of service persistent client crash...

[ MDKSA-2006:049 ] - Updated squirrelmail packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:049 http://www.mandriva.com/security/ Package : squirrelmail Date : February 27, 2006 Affected: Corporate 3.0 Problem Description: Webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject...

[ MDKSA-2006:047 ] - Updated metamail packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:047 http://www.mandriva.com/security/ Package : metamail Date : February 22, 2006 Affected: 10.1, 10.2, 2006.0, Corporate 3.0 Problem Description: Ulf Harnhammar discovered a buffer overflow vulnerability in...

[Full-disclosure] [ MDKSA-2006:046 ] - Updated tar packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:046 http://www.mandriva.com/security/ Package : tar Date : February 21, 2006 Affected: 10.1, 10.2, 2006.0 Problem Description: Gnu tar versions 1.14 and above have a buffer overflow vulnerability and some...

Mandrake Linux Security Advisory : tar (MDKSA-2006:046)

Gnu tar versions 1.14 and above have a buffer overflow vulnerability and some other issues including : - Carefully crafted invalid headers can cause buffer overrun. - Invalid header fields go undiagnosed. - Some valid time strings are ignored. The updated packages have been patched to address thi...

[ MDKSA-2006:027 ] - Updated gzip packages fix zgrep vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:027 http://www.mandriva.com/security/ Package : gzip Date : January 30, 2006 Affected: 10.1, 10.2, 2006.0, Corporate 2.1, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: Zgrep in gzip before...

[ MDKSA-2006:026 ] - Updated bzip2 packages fix bzgrep vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:026 http://www.mandriva.com/security/ Package : bzip2 Date : January 30, 2006 Affected: 10.1, 10.2, 2006.0, Corporate 2.1, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: A bug was found in th...

[Full-disclosure] [ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:025 http://www.mandriva.com/security/ Package : net-snmp Date : January 26, 2006 Affected: 10.1, 10.2, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The fixproc application in Net-SNMP creat...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2005:209)

Thomas Wolff and Miloslav Trmac discovered a race condition in the fetchmailconf program. fetchmailconf would create the initial output configuration file with insecure permissions and only after writing would it change permissions to be more restrictive. During that time, passwords and other dat...

MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:005 http://www.mandriva.com/security/ Package : xpdf Date : January 5, 2006 Affected: 2006.0, Corporate 2.1, Corporate 3.0 Problem Description: Multiple heap-based buffer overflows in the...

[Full-disclosure] MDKSA-2006:001 - Updated tkcvs packages fix insecure temporary file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:001 http://www.mandriva.com/security/ Package : tkcvs Date : January 3, 2006 Affected: 10.2, 2006.0 Problem Description: Javier Fernandez-Sanguino Pena discovered that tkdiff created temporary files in an...

[Full-disclosure] MDKSA-2005:239 - Updated printer-filters-utils packages fix local vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:239 http://www.mandriva.com/security/ Package : printer-filters-utils Date : December 30, 2005 Affected: 10.1, 10.2, 2006.0, Corporate 2.1, Corporate 3.0 Problem Description: "newbug" discovered a local root...

MDKSA-2005:228 - Updated xine-lib packages fix buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:228 http://www.mandriva.com/security/ Package : xine-lib Date : December 14, 2005 Affected: 2006.0, Corporate 3.0 Problem Description: Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which...

MDKSA-2005:230 - Updated mplayer packages fix buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:230 http://www.mandriva.com/security/ Package : mplayer Date : December 14, 2005 Affected: 2006.0, Corporate 3.0 Problem Description: Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which c...

MDKSA-2005:231 - Updated ffmpeg packages fix buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:231 http://www.mandriva.com/security/ Package : ffmpeg Date : December 14, 2005 Affected: 2006.0, Corporate 3.0 Problem Description: Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which ca...