MDVA-2010:226 : perl-URPM

This advisory fixes the gpg keys parsing, which were resulting in some warnings bug 61636. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatical...

[ MDVSA-2010:224 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:224 http://www.mandriva.com/security/ Package : php Date : November 9, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered...

Mandriva Linux Security Advisory : apr-util (MDVSA-2010:192)

A denial of service attack against aprbrigadesplitline was discovered in apr-util CVE-2010-1623. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=4 90 The update...

MDVA-2010:196 : firefox

This is a maintenance release of mozilla firefox and thunderbird that upgrades firefox to 3.6.10 and thunderbird to 3.0.8. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...

MDVA-2009:070 : x11-driver-video-ati

When using the ati Xorg driver with two monitors attached the mouse cursor might be drawn incorrectly. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2010:031 : freeradius

Perl scripts shipped in the freeradius-web sub package use File::Temp perl module incorrectly, preventing to execute them correctly. In these perl scripts, a change was made to replace the line 'use File::Temp ;' by 'use File::Tempqwtempfile tempdir;'. %NASLMINLEVEL 70300 @DEPRECATED@ This script...

MDVA-2010:143 : xine-ui

The LIRC infrared support in xine-ui program didn't work. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically...

Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2009:235)

Multiple vulnerabilities was discovered and corrected in silc-toolkit : Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:239)

Multiple vulnerabilities was discovered and corrected in openssl : Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impa...

MDVA-2010:016 : firefox

It was dicovered that the kde4ff theme for firefox 3.5 firefox-theme-kde4ff did not work, to address this problem the kfirefox theme firefox-theme-kfirefox is provided as a drop in replacement. It was discovered that the beagle extension for firefox firefox-ext-beagle had the wrong release number...

MDVA-2010:160 : heartbeat

The heartbeat package in the 2010.0 release had wrong permissions and ownership for /usr/bin/clstatus this prevented it from working correctly. Also when peers were outdated heartbeat didn't failover gracefully. This update fixes both these issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:002)

A security vulnerability has been identified and fixed in pidgin : Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka...

MDVA-2009:202 : java-1.6.0-openjdk

Correct issues with scaled bitmap fonts by properly installing fontconfig.properties and requires a default font bug 55005. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDVA-2010:129 : netcdf

This updates fixes a wrong Obsoletes: tag on netcdf package which would break upgrades to 2010.1. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2010:108 : kde4

In mandriva 2010.0, we provided KDE 4.3.2, this update brings KDE to version 4.3.5, overall, it provides many bug fixes and enhancements. For a complete list with changes, access the official announcement at http://www.kde.org/announcements/announce-4.3.5.php In addiction we are providing new...

MDVA-2010:085 : dhcp

Dhcp-server package shipped with Mandriva Linux 2009.1 and 2010.0 was using incorrect SVLDAP definitions during the build, which resulted in ldap support being non-functional. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is...

MDVA-2009:085 : mesa

A bug in mesa would cause hardware accelerated yuv conversion to fail, resulting in videos being displayed with wrong colors while using a gl video output driver. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currentl...

Mandriva Linux Security Advisory : dovecot (MDVSA-2009:306)

A vulnerability was discovered and corrected in dovecot : Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the...

Linux/x86-64 - Disable ASLR Security - 143 bytes

Linux/x86-64 - Disable ASLR Security - 143 bytes. Shellcode exploit for linx86-64 platform / Title: Linux/x86-64 - Disable ASLR Security - 143 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase o...

linux/x86 execve("/usr/bin/wget", "aaaa"); - 42 bytes

Exploit for linux/x86 platform in category shellcode ===================================================== linux/x86 execve"/usr/bin/wget", "aaaa"; - 42 bytes ===================================================== / Title: Linux x86 execve"/usr/bin/wget", "aaaa"; - 42 bytes Author: Jonathan Salwan...