MDVA-2009:168 : rrdtool

This update addresses a problem where rrdtool-1.3.x required a font installed like for example the DejaVuSansMono.ttf font. A dependency was added on fonts-ttf-dejavu to address this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

Mandriva Linux Security Advisory : python (MDVSA-2009:212-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

linux/x86 killall5 polymorphic shellcode 61 bytes

No description provided by source. / Title: Linux x86 | Polymorphic Shellcode killall5 - 61 bytes Author: Jonathan Salwan Mail: submit ! shell-storm.org ! DataBase of shellcode == http://www.shell-storm.org/shellcode/ killall5 is the SystemV killall command. It sends a signal to all processes...

MDVA-2009:094 : dansguardian

There was a bug with the dansguardian build where the path to /var/lib/dansguardian was wrongly set to /var/dansguardian. The libclamav support has been disabled because of too frequent changes in the clamav API, the preferred way to use clamav is to use clamd. This update fixes these problems...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2009:132-1)

Multiple vulnerabilities has been found and corrected in libsndfile : Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly...

util-linux security and bug fix update

2.12a-24.el4 - fix 458539 - man nfs : wrong information about nfs version used 2.12a-23.el4 - fix 485004 - move mount doesnt correctly update mtab 2.12a-22.el4 - fix 472186 - mount -a has problems with duplicate labels in a mpath setup - fix 471372 - RHEL4: fdisk cannot create partition with...

linux/x86-64 bindshell port:4444 shellcode 132 bytes

No description provided by source. / linux/x86-64 bindshellport 4444 xi4oyu at 80sec.com http://www.80sec.com BITS 64 xor eax,eax xor ebx,ebx xor edx,edx ;socket mov al,0x1 mov esi,eax inc al mov edi,eax mov dl,0x6 mov al,0x29 syscall xchg ebx,eax ;store the server sock ;bind xor rax,rax push rax...

MDVA-2009:061 : portreserve

In some cases, CUPS in Mandriva Linux 2009 would start but be unavailable, due to the possibility that 'portreserve' service was started at the wrong time, thus being unable to do its job. This update fixes that, by making sure portreserve start at the right time during system initialization...

MDKA-2007:137 : nss_ldap

This update corrects an issue in nssldap when handling SIGPIPE, which could manifest itself in many different ways in systems running with nssldap installed and configured, such as a simple application silent error to a complete abort. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDVA-2009:048 : evolution

This update prevents unwanted dependency with gpilotd bug 46302. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

MDKA-2007:111 : glibc

Two issues were discovered in the glibc package, after Mandriva Linux 2008.0 release. First is a bug, reported in glibc-utils package, that cause the memusage and xtrace utilities to not run correctly. The second is a minor problem with file integrity check when using rpm -V, that gives a false...

MDVA-2009:023 : db46

Additional official patches have been released for db 4.6 after Mandriva release. They fix the following issues: - There was the possibility that the wrong number of mutexes would be allocated. This issue could cause applications with multiple cache regions to see undefined behavior in rare cases...

Mandriva Linux Security Advisory : bind (MDVSA-2009:002)

A flaw was found in how BIND checked the return value of the OpenSSL DSAdoverify function. On systems that use DNSSEC, a malicious zone could present a malformed DSA certificate and bypass proper certificate validation, which would allow for spoofing attacks CVE-2009-0025. The updated packages ha...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:137)

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. CVE-2008-2152 Also, according to bug 38874 decimal numbers on...

MDVA-2008:117 : x11-server

This update fixes an X server crash with multiple indirect rendering clients and software rendering. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2008:103 : pidgin

A protocol change at the ICQ servers made it impossible to connect with Pidgin. This update adapts Pidgin to the new protocol version. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Networ...

MDVA-2008:024 : rpmdrake

This update fixes a crash when reading packages with an empty backport media 36720. This is a rare bug since DVD media did not include backport media, and network media provides a non-empty backport media. It also makes sure that a wait dialog always got destroyed 36921. Due to a bug, in some err...

MDKA-2007:037 : initscripts

The text message printed over the bootsplash image was always displayed in English during shutdown or reboot, never being translated using the system's locale settings. This update package resolves the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2007:221)

Alin Rad Pop found several flaws in how PDF files are handled in kpdf. An attacker could create a malicious PDF file that would cause kpdf to crash or potentially execute arbitrary code when opened. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Networ...

MDVA-2008:163 : mdkonline

This update ensures that the distribution upgrade notification is not detected in incorrect cases, and ensures that a distribution upgrade is only suggested after all security updates have been applied. It also improves the distribution upgrade confirmation dialog and reliability of network packa...