Mandriva Linux Security Advisory : pam_mount (MDVSA-2009:004)

passwdehd script in pammount would allow local users to overwrite arbitrary files via a symlink attack on a temporary file. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandriva Linux Security Advisory : wireshark (MDVSA-2009:088)

Multiple vulnerabilities has been identified and corrected in wireshark : o The PROFINET dissector was vulnerable to a format string overflow CVE-2009-1210. o The Check Point High-Availability Protocol CPHAP dissecto could crash CVE-2009-1268. o Wireshark could crash while loading a Tektronix .rf...

Mandriva Linux Security Advisory : lynx (MDVSA-2008:218)

A vulnerability was found in the Lynxcgi: URI handler that could allow an attacker to create a web page redirecting to a malicious URL that would execute arbitrary code as the user running Lynx, if they were using the non-default Advanced user mode CVE-2008-4690. This update corrects these issues...

Fedora 10 : nagios-3.0.5-1.fc10 (2008-10323)

Upstream has released a new version: Security fix for Cross Site Request Forgery CSRF bug reported by Tim Starling. Sample audio files for CGIs removed from distribution Fix for mutliline config file continuation bug Minor fix to RPM spec file Fix for AIX compiler warnings Minor sample config fil...

Mandriva Linux Security Advisory : perl-Net-DNS (MDVSA-2008:073)

A vulnerability in the Net::DNS perl module was found that could allow remote attackers to cause a denial of service via a crafted DNS response. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

MDVA-2008:156 : kdebase4-workspace

This update adds the auto-hide feature to the KDE4 desktop panel. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriv...

MDVA-2008:001 : urpmi

urpmi --auto-update was strangely broken in some uncertain cases see bug 36134. urpmi --limit-rate had a regression introduced in version 4.9.12. The updated package fixes these issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2008:151 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain new Daylight Savings Time information and Time Zone information for some locations. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecate...

MDVA-2008:103 : pidgin

A protocol change at the ICQ servers made it impossible to connect with Pidgin. This update adapts Pidgin to the new protocol version. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Networ...

MDKA-2007:121 : foo2zjs

Due to a change of URLs on foo2zjs project, the firmware download for some common printers was failing, when configuring such printers with printerdrake. This update packages fix the issue by updating those URLs. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

MDKA-2007:114 : eclipse

The Eclipse IDE provided with 2008.0 does not run, instead outputting a glibc error or JVM termination error. This update fixes that, and some other bugs in the package. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDVA-2008:160 : mandriva-doc

This update of the Mandriva Linux 2009 documentation provides a major update to the french release. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2008:195 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain new Daylight Savings Time information and Time Zone information for some locations. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecate...

MDVA-2009:044 : module-init-tools

This stable update fixes a bug in depmod which may cause the corruption of the modules.dep file when triggered. 46884 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

MDVA-2008:014 : isdn4k-utils

The capi4linux initscript from the isdn4k-utils package in Mandriva Linux 2008.0 had incorrect permissions, which prevented it from being used. The updated package fixes the permissions of the initscript. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is...

MDVA-2008:061 : rpmdrake

This update fixes a minor issue in rpmdrake; it prevents crashing if the RPM database is locked when trying to install some packages bug 40244. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenab...

MDVA-2008:062 : drakxtools

This update fixes several minor issues: - some GUIes eg: rpmdrake would crash on clicking on the close button while they load bug 35230 - draksec was crashing if the administrator refused to install bug 38911 - localdrake: After changing the localization language from drakconf in a high security...

MDVA-2008:080 : gnome-themes-extras

A typo in the Darklooks GTK theme definition file made this theme unusable. This update fixes it. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2008:045 : drakbt

A bug with drakbt caused it to crash when selecting private torrents. This update corrects the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script wa...

MDVA-2008:154 : util-linux-ng

Several bugs were found in util-linux-ng package: - Using an offset on loopback device was broken - Creating an encrypted loopback with losetup -e was broken - Using fdisk to modify the partition table of an image file did not write the changes The updated package fixes these issues. %NASLMINLEVE...