MDKA-2007:064 : k3b

The k3b packages shipped with Mandriva Linux 2007.1 were unable to locate the sox binary despite it being installed and available. This update fixes this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDKA-2007:126 : f-spot

Several bugs in f-spot prevented the photo import in case of an upgrade from an older distribution release. This update fixes them. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDKA-2007:060 : gnome-vfs2

Unionfs filesystems were not being recognized as supporting trash for GNOME applications. This was preventing the Flash-based product to have a fully functional trash under the GNOME desktop environment. This update fixes the bug and improves performance for XFS filesystem users as well...

MDKA-2007:056 : pidentd

The pidentd package had incorrect requirements that prevented it from being installed. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDKA-2007:073 : gtk+2.0

With some window managers such as IceWM or matchbox, or when using no window manager, the GTK file chooser was resizing infinitely. This bug notably occurred in the save dialog of Mozilla Firefox. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecat...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

Mandrake Linux Security Advisory : wpa_supplicant (MDKSA-2007:245)

Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 allows remote attackers to cause a denial of service crash via crafted TSF data. Updated package fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandrake Linux Security Advisory : ktorrent (MDKSA-2007:095)

A directory traversal vulnerability was found in KTorrent prior to 2.1.2, due to an incomplete fix for a prior directory traversal vulnerability that was corrected in version 2.1.2. Previously, KTorrent would only check for the string .., which could permit strings such as ../. Updated packages...

MDKA-2007:120 : util-linux-ng

The mount program failed to mount Samba mountpoints if the path of the Samba share existed on the local system. When calling mount -t smbfs //foo/bar /mnt/foo, mount.smbfs would be called with /foo/bar if /foo/bar existed locally, and would display its usage. This update package fixes the issue...

MDKA-2007:075 : openal

The openal devel package used invalid requirements in its pkgconfig file, making some basic pkgconfig commands fail such as pkg-config --exists openal. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDKA-2007:044 : rfbdrake

rfbdrake used to crash when displaying error messages. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDKA-2007:109 : beagle

A missing path in the beagle command line tools made beagle-info crash. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script...

Mandrake Linux Security Advisory : ghostscript (MDKSA-2007:208)

A function in the JasPer JPEG-2000 library before 1.900 could allow a remote user-assisted attack to cause a crash and possibly corrupt the heap via malformed image files. Newer versions of ghostscript contain an embedded copy of libjasper and as such is vulnerable to this issue. Updated packages...

Mandrake Linux Security Advisory : bind (MDKSA-2007:100)

A vulnerability in ISC BIND 9.4.0, when recursion is enabled, could allow a remote attacker to cause a denial of service daemon exit via a certain sequence of queries. BIND 9.4.1, which corrects this issue, is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:131)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.4. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

MDKA-2007:043 : drakstats

The drakstats program used to crash when sending statistics and when reporting error messages. This update package fixes these crash issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:232)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The minix filesystem code allows local users to cause a denial of service hang via a malformed minix file stream CVE-2006-6058. An integer underflow in the Linux kernel prior to 2.6.23 allows remote attackers to cause a...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:226)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The tcpsacktagwritequeue function in the Linux kernel 2.6.21 through 2.6.23.7 allows remote attackers to cause a denial of service via crafted ACK responses that trigger a NULL pointer dereference CVE-2007-5501. To updat...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:126-1)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.4. This update provides the latest Firefox to correct these issues. Update : The l10n language packages have now been updated and are available. %NASLMINLEVEL 70300 C Tenab...

Mandrake Linux Security Advisory : xpdf (MDKSA-2007:219)

Alin Rad Pop found several flaws in how PDF files are handled in xpdf. An attacker could create a malicious PDF file that would cause xpdf to crash or potentially execute arbitrary code when opened. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Networ...