Mandrake Linux Security Advisory : ImageMagick (MDKSA-2007:041)

Vladimir Nadvornik discovered a buffer overflow in GraphicsMagick and ImageMagick allows user-assisted attackers to cause a denial of service and possibly execute execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. This is related t...

Mandrake Linux Security Advisory : php (MDKSA-2006:185)

PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safemode and openbasedir, via the inirestore function, which resets the values to their php.ini Master Value defaults. CVE-2006-4625 A race condition in the symlink functi...

Mandrake Linux Security Advisory : openldap (MDKSA-2006:171)

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

MDKA-2006:036 : cups

A bug in the shipped version of CUPS would allow for the unexpected deletion of cupsd.conf and cause a crash of CUPS. This issue, as well as many other bugs, have been corrected in CUPS 1.2.4, which is being provided with this update. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2006:016 : libgphoto

A bug was discovered with libgphoto which was preventing the removal of icons on the desktop in GNOME or in the Devices window in KDE when a digital camera was unplugged. Updated packages have been patched to correct the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

MDKA-2005:041 : freetype2

Updated freetype2 packages fix an invalid subpixel rendering for LCD screens with Bitstream Vera font problem. The Bitstream Vera font is the font used by default. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled o...

MDKA-2005:055 : acpid

A number of bugs have been fixed in this new acpid package: Correct an error in the initscript, to look for lmbattery.sh rather than battery.sh. Correct an issue where logrotate of acpid's log files would cause the X server to consume 100% cpu. Note: In order to restart the acpid service you may...

MDKA-2005:050 : scim-qtimm

Due to a bug in the RPM requires for the scim-qtimm package, it was only installable on i586 platforms, and not on x8664 due to differences in the naming for libqt3 vs. lib64qt3. This update corrects the requires allowing the package to be installed on Mandriva Linux 2006/x8664. %NASLMINLEVEL...

MDKA-2006:058 : powermanga

Powermanga fails to to start with a 'can't locate file : texts/texten.txt' error message. The required files have been included in this update. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDKA-2006:048 : gnuplot

An error in gnuplot was causing it to fail with a segmentation fault whenever the user attempted to produce a graphical plot via the default 'x11' term. The updated package corrects this error and allows graphical plotting via X11. Updated packages correct this issue. %NASLMINLEVEL 999999...

MDKA-2006:012 : webmin

Michael Zaripov reported the previous webmin update points to the wrong init script for mysql. Updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDKA-2005:058 : eagle-usb

This update loads the firmware each time an eagle-usb modem is plugged in, not just when the eagle-usb module is loaded. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDKA-2005:054 : autofs

A problem with how autofs was linked with the LDAP libraries would cause autofs to segfault on startup. The updated package has been fixed to correct this problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled o...

MDKA-2005:060 : msec

Bugs in the msec package have been corrected: msec wasn't properly parsing the output on security checks to check ownership of files, reporting files as unowned when they were in fact properly owned by a valid user. The /var/lib/msec/security.conf was no longer being generated which prevented mse...

MDKA-2006:022 : module-init-tools

The default configuration of module-init-tools was to send a HUP signal to the CUPS daemon whenever the 'usblp' kernel module is loaded, for example when a USB printer is plugged in. Due to udev also sending a HUP signal to the CUPS daemon on pluggin in a USB printer there were two HUPs one short...

MDKA-2006:007 : festival

The festival program on x86 platforms crashes when the user attempts to use it. The updated packages are rebuilt against the correct libraries and correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disable...

MDKA-2006:044 : xinetd

The initscript for xinetd incorrectly set the locale to enUS. If the locales-en package is not installed on the system, some xinetd services may not work properly. This was first noted with the svnserve program from subversion. This has been fixed in the updated packages, which set the locale to ...

MDKA-2007:007 : lirc

Dkms-lirc allows one to install LIRC drivers on non-Mandriva kernels. It contains a driver named lircparallel.ko which does not work on SMP-enabled kernels, preventing the driver installation on such kernels. The lircparallel.ko driver has been removed from the updated package and moved to a...

Mandrake Linux Security Advisory : libksba (MDKSA-2006:183)

The libksba library, as used by gpgsm in the gnupg2 package, allows attackers to cause a denial of service application crash via a malformed X.509 certificate in a signature. libksba-0.9.15 in Mandriva 2007.0 is not affected by this issue. Updated packages have been patched to correct this issue...

Mandrake Linux Security Advisory : samba (MDKSA-2007:034)

A logic error in the deferred open code for smbd may allow an authenticated user to exhaust resources such as memory and CPU on the server by opening multiple CIFS sessions, each of which will normally spawn a new smbd process, and sending each connection into an infinite loop. CVE-2007-0452 The...