PulseAudio: Insecure temporary file usage

Background PulseAudio is a sound system for POSIX OSes. Description The pamakesecuredir function in core-util.c does not handle temporary files securely. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application...

java-1_7_0-openjdk: update to icedtea-2.3.4 (critical)

java-170-openjdk was updated to icedtea-2.3.4 fixing bugs and also severe security issues: Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions Bug fixe...

Mandriva Update for libalsa2 MDVA-2010:227 (libalsa2)

Check for the Version of libalsa2 OpenVAS Vulnerability Test Mandriva Update for libalsa2 MDVA-2010:227 libalsa2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libalsa2 MDVA-2010:227 (libalsa2)

Check for the Version of libalsa2 OpenVAS Vulnerability Test Mandriva Update for libalsa2 MDVA-2010:227 libalsa2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:227 : libalsa2

This is a bugfix and maintenance update bundle that addresses various issues in a number of packages. Some thread-related problems were found in the libalsa2 library that could cause segmentation faults in some audio applications one example being phonon when used with gstreamer output and...

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-42.b18.fc13 (2010-12759)

S6678385, RH551835: Fixes jvm crashes when window is resized. Produces the 'expected' behavior for full screen applications, when running the Metacity window manager. PR453, OJ100142: Fix policy evaluation to match the proprietary JDK. IcedTeaNPPlugin. RH524387: javax.net.ssl.SSLKeyException: RSA...

Fedora 12 : java-1.6.0-openjdk-1.6.0.0-40.b18.fc12 (2010-12758)

S6678385, RH551835: Fixes jvm crashes when window is resized. Produces the 'expected' behavior for full screen applications, when running the Metacity window manager. PR453, OJ100142: Fix policy evaluation to match the proprietary JDK. IcedTeaNPPlugin. RH524387: javax.net.ssl.SSLKeyException: RSA...

MDVA-2009:121 : pulseaudio

Multiple bugs has been identified and corrected in pulseaudio: - alsa: allow configuration of fallback device strings in profiles util: if NULL is passed to papathgetfilename just hand it through alsa: don't hit an assert when invalid module arguments are passed - alsa: fix wording, we are speaki...

MDVA-2010:183 : paprefs

The network settings were always disabled in the Pulseaudio settings. This update makes the Pulseaudio preferences dialog work again with the latest update of pulseaudio. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDVA-2010:149 : SDL12

Updated libSDL packages are being provided for Mandriva Linux 2010.0 which fixes random crackling occurring when playing sound in SDL-based applications via PulseAudio. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabl...

Mandriva Update for paprefs MDVA-2010:183 (paprefs)

Check for the Version of paprefs OpenVAS Vulnerability Test Mandriva Update for paprefs MDVA-2010:183 paprefs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for paprefs MDVA-2010:183 (paprefs)

Check for the Version of paprefs OpenVAS Vulnerability Test Mandriva Update for paprefs MDVA-2010:183 paprefs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MDVA-2010:168 : espeak

Espeak as shipped with Mandriva 2010.0 had no support for pulseaudio. An updated package was provided that added pulseaudio support, but didn't work anymore for systems that had pulseaudio disabled. This update makes espeak work in both scenarios. Additional packages has been added to this adviso...

MDVA-2010:107 : pulseaudio

The version of PulseAudio shipped with 2010.0 has had numerous bug fixes since it was released. This updates the PulseAudio package to 0.9.21 which contains most of the bug fixes the package versions from 0.9.17 through 0.9.21 are all considered bugfix updates. Additional fixes from the upstream...

MDVA-2009:245 : espeak

In Mandriva 2010.0, espeak did not support the pulseaudio audio system, which rendered incomprehensible speech. This update changes the build of espeak to use pulseaudio as audio output. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Mandriva Update for pulseaudio MDVSA-2010:124 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVSA-2010:124 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for pulseaudio MDVSA-2010:124 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVSA-2010:124 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2010:124)

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file CVE-2009-1299. This update fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security...

Mandriva Update for espeak MDVA-2010:168 (espeak)

Check for the Version of espeak OpenVAS Vulnerability Test Mandriva Update for espeak MDVA-2010:168 espeak Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for espeak MDVA-2010:168 (espeak)

Check for the Version of espeak OpenVAS Vulnerability Test Mandriva Update for espeak MDVA-2010:168 espeak Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...