Fedora Core 10 FEDORA-2009-2657 (glib2)

The remote host is missing an update to glib2 announced via advisory FEDORA-2009-2657. OpenVAS Vulnerability Test $Id: fcore20092657.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2657 glib2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora 10 : libmodplug-0.8.7-1.fc10 (2009-4068)

Update to 0.8.7: http://sourceforge.net/project/shownotes.php?groupid=1275&releaseid= 675660 http://sourceforge.net/project/shownotes.php?groupid=1275&releaseid= 677065 http://sourceforge.net/project/shownotes.php?groupid=1275&releaseid= 678622 Note that Tenable Network Security has extracted the...

MDKA-2007:068 : e2fsprogs

The libblkid library contained in the libext2fs2 package contains a serious memory leak which can cause machines being used as NFS servers to rapidly consume system memory. This update fixes the memory leak. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch...

MDVA-2009:047 : drakconf

This update prevents drakconf from crashing if the tool currently embedded within drakconf segfaulted in some rare case bug 48080. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:050 : libtommath

The tommath library will be needed for future clamav updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

MDVA-2008:109 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2008 and later for certain time zones. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecat...

MDVA-2008:122 : vpnc

The vpnc package that shipped with Mandriva Linux 2008.1 was missing the cisco-decrypt binary, which is used for converting Cisco VPN client profile files encrypted passwords. As a result, any call to pcf2vpnc failed due to the missing binary. This update provides the missing binary. %NASLMINLEVE...

MDVA-2008:048 : x11-driver-video

The virtual package x11-driver-video would incorrectly require sparc specific video drivers on a x86 architecture computer. The updated package fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDKA-2007:110 : kdebase

KDM users were unable to login remotelly using XDMCP, because of a bug in the consolekit support. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

MDKA-2007:123 : urpmi

The package included with Mandriva Linux 2008 for urpmi, the Mandriva package management tool, has regressions in the behaviour of the --src and --install-src parameters. The --install-src parameter fails to work at all. The --src parameter does not download and install the actual .src.rpm as it...

MDVA-2008:185 : kde4

Mandriva Linux 2009.0 shipped with KDE 4.1.2. This update provides the full KDE 4.1.3 for Mandriva Linux 2009.0 which brings with it numerous enhancements and bugfixes. Please note: the package list looks empty in this advisory due to the fact this update provides over 900 packages. The web...

MDVA-2008:043 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2008 and later for certain time zones. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecat...

MDVA-2009:023 : db46

Additional official patches have been released for db 4.6 after Mandriva release. They fix the following issues: - There was the possibility that the wrong number of mutexes would be allocated. This issue could cause applications with multiple cache regions to see undefined behavior in rare cases...

MDVA-2008:079 : kdegraphics

Display session in Kdesktop preference window would hang the X server. This update fixes this bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2008:055)

Chris Evans found a buffer overflow condition in Ghostscript, which can lead to arbitrary code execution as the user running any application using it to process a maliciously crafted Postscript file. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandriva Linux Security Advisory : pam_mount (MDVSA-2009:004)

passwdehd script in pammount would allow local users to overwrite arbitrary files via a symlink attack on a temporary file. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandriva Linux Security Advisory : wireshark (MDVSA-2009:088)

Multiple vulnerabilities has been identified and corrected in wireshark : o The PROFINET dissector was vulnerable to a format string overflow CVE-2009-1210. o The Check Point High-Availability Protocol CPHAP dissecto could crash CVE-2009-1268. o Wireshark could crash while loading a Tektronix .rf...

Mandriva Linux Security Advisory : lynx (MDVSA-2008:218)

A vulnerability was found in the Lynxcgi: URI handler that could allow an attacker to create a web page redirecting to a malicious URL that would execute arbitrary code as the user running Lynx, if they were using the non-default Advanced user mode CVE-2008-4690. This update corrects these issues...

Fedora 10 : nagios-3.0.5-1.fc10 (2008-10323)

Upstream has released a new version: Security fix for Cross Site Request Forgery CSRF bug reported by Tim Starling. Sample audio files for CGIs removed from distribution Fix for mutliline config file continuation bug Minor fix to RPM spec file Fix for AIX compiler warnings Minor sample config fil...

Mandriva Linux Security Advisory : perl-Net-DNS (MDVSA-2008:073)

A vulnerability in the Net::DNS perl module was found that could allow remote attackers to cause a denial of service via a crafted DNS response. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...