Fedora Core 6 : openoffice.org-2.0.4-5.5.17 (2007-376)

CVE-2007-0239 rhbz228008 potential shell escape problem in some hyperlinks CVE-2007-0238 rhbz226966 potential buffer overflows in calc legacy file format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Mandrake Linux Security Advisory : file (MDKSA-2007:067)

Jean-Sebastien Guay-Leroux discovered an integer underflow in the fileprintf function in file prior to 4.20 that allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow. Updated packages have been patched to address this issue. %NASLMINLEVEL...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2007:062)

The DSVideoDecoderOpen function in DirectShow/DSVideoDecoder.c in xine-lib does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code. Updated packages have been patched to address this issue...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:054)

ecma/kjshtml.cpp in KDE JavaScript KJS, as used in Konqueror, allows remote attackers to cause a denial of service crash by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference. Updated packages have been patched to address this...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:052)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 1.5.0.10. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Fedora Core 6 : thunderbird-1.5.0.10-1.fc6 (2007-308)

Thu Mar 1 2007 Martin Stransky 1.5.0.10-1 - Update to 1.5.0.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

MDKA-2006:037 : glibc

Updated glibc packages are being provided to ensure that kernel and user-space tools are in sync. This update also fixes a bug present on x8664 platforms where strncmp is mis-optimized. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDKA-2006:066 : evolution-sharp

The evolution-sharp bindings weren't configured properly, preventing beagle from indexing Evolution mailboxes. This update fixes this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

MDKA-2005:042 : mozilla-thunderbird-nb

Due to a packaging bug, the mozilla-thunderbird-nb package could not be installed. This update corrects the bug allowing the package to be installed. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. ...

MDKA-2006:052 : opensc

Opensc is a library for accessing smart card devices. This update fixes a problem which prevented Oberthur smart cards from being recognized and used. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06....

MDKA-2006:030 : imlib2

The tiff loader from imlib2 crashes when processing images on the x8664 platform. This was reported when using digikam on x8664, which uses this loader. Updated packages are provided that correct the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch ...

MDKA-2006:065 : hal

A bug in partition detection for some SD/MMC card readers those using the sdhci driver was preventing correct detection by HAL, breaking automatic mounting/unmounting on card insertion/removal. Another bug was preventing correct mounting of LUKS-encrypted removable media. This update fixes these...

Mandrake Linux Security Advisory : rpm (MDKSA-2006:200)

A heap-based buffer overflow was discovered in librpm when the LANG or LCALL environment variable is set to ruRU.UTF-8 and possibly other locales, which could allow for user-assisted attackers to execute arbitrary code via crafted RPM packages. Updated packages have been patched to correct this...

MDKA-2007:009 : perl-SOAP-Lite

SOAP::Lite makes use of auto-generated methods with names that clash with methods exported by UNIVERSAL::require. As a result, using the two modules simultaneously will result in an immediate program crash. The package has been patched with an upstream fix to correct the issue. %NASLMINLEVEL 9999...

MDKA-2006:001 : nss_ldap

A bug was discovered in nssldap when a group has a large number of members. This was resulting in SIGABRT of 'ls -la' when attempting to add additional users to the group. Updated packages have been patched to correct the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

MDKA-2006:032 : epiphany-extensions

Recently, epiphany was updated to work with the latest Mozilla Firefox however new epiphany-extensions packages were not available. This update provides updated epiphany-extensions for epiphany. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDKA-2006:043 : subversion

One of subversion's operating modes, svnserve, needs some entries in the /etc/services file. These entries are created during package installation, but under some conditions this procedure fails and /etc/services remains without them. The updated packages correct this issue. %NASLMINLEVEL 999999...

MDKA-2007:002 : kdeutils

A bug in the kdeutils-ark package prevented the creation of a zip format archive using Konqueror, or from ark directly. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDKA-2006:027 : xorg-x11

A misapplied patch in a recent X.org updated caused keyboard layout problems which resulted in some users being unable to use the CTRL-ALT-function key combination to switch to a console, as well as other keyboard mapping issues. Updated packages have been re-patched to correct these issues...

SUSE-SA:2007:013: xine-ui,xine-lib,xine-extra,xine-devel

The remote host is missing the patch for the advisory SUSE-SA:2007:013 xine-ui,xine-lib,xine-extra,xine-devel. This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not...