MDKA-2006:040 : wxPythonGTK

A problem with wxPythonGTK would prevent some python programs, such as pyshell, from starting due to incorrect path locations. The updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabl...

MDKA-2006:063 : tomboy

A bug in the build system made the tomboy package miss some dependencies like gnome-sharp2 on x8664. The rebuilt package now installs all required packages. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDKA-2006:026 : netpbm

The pnmtopalm program, part of netpbm, crashes on many images. 21020 The pnmtofits program, part of netpbm, crashes during conversion. 21444 Updated packages have been patched to correct these issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDKA-2005:055 : acpid

A number of bugs have been fixed in this new acpid package: Correct an error in the initscript, to look for lmbattery.sh rather than battery.sh. Correct an issue where logrotate of acpid's log files would cause the X server to consume 100% cpu. Note: In order to restart the acpid service you may...

MDKA-2006:022 : module-init-tools

The default configuration of module-init-tools was to send a HUP signal to the CUPS daemon whenever the 'usblp' kernel module is loaded, for example when a USB printer is plugged in. Due to udev also sending a HUP signal to the CUPS daemon on pluggin in a USB printer there were two HUPs one short...

MDKA-2004:034 : rpmdrake

When rpmdrake would come across a package name containing the string '-h' it would print out the help usage instead of installing or upgrading a package. The updated packages fix this. It is recommended that all users upgrade immediately. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2006:009 : OpenOffice.org

Updated OpenOffice.org package correct a bug that caused a random crash when opening certain sxi files. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script w...

MDKA-2005:061 : digikamimageplugins

A previous update of DigiKam MDKA-2005:059 bumped the version to 0.8.0. After this update, Narfi Stefansson reported that showfoto, from digikamimageplugins was crashing when trying to use 'Free Rotation'. This update bumps digikamimageplugins to version 0.8.0 also. %NASLMINLEVEL 999999...

Mandrake Linux Security Advisory : gv (MDKSA-2006:214-1)

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the DocumentMedia header. Package...

Mandrake Linux Security Advisory : tetex (MDKSA-2007:022)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:182)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Stephane Eranian discovered an issue with permon2.0 where, under certain circumstances, the perfmonctl system call may not correctly manage the file descriptor reference count, resulting in the system possibly...

Mandrake Linux Security Advisory : libpng (MDKSA-2006:209)

Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to 'chunk error processing,' possibly involving the 'chunkname'. CVE-2006-33...

Mandrake Linux Security Advisory : openssh (MDKSA-2006:204)

A vulnerability in the privilege separation functionality in OpenSSH was discovered, caused by an incorrect checking for bad signatures in sshd's privsep monitor. As a result, the monitor and the unprivileged process can get out sync. The OpenSSH team indicated that this bug is not known to be...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2006:223)

Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandrake Linux Security Advisory : tar (MDKSA-2006:219)

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPENAMES record with a symbolic link, which is not properly handled by the extractarchive function in extract.c and extractmangle function in...

Mandrake Linux Security Advisory : openssl (MDKSA-2006:172-1)

Dr S N Henson of the OpenSSL core team and Open Network Security recently developed an ASN1 test suite for NISCC www.niscc.gov.uk. When the test suite was run against OpenSSL two denial of service vulnerabilities were discovered. During the parsing of certain invalid ASN1 structures an error...

Mandrake Linux Security Advisory : mutt (MDKSA-2006:190)

A race condition in the safeopen function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the OEXCL flag on NFS filesystems. CVE-2006-5297 The muttadvmktemp function in...

Mandrake Linux Security Advisory : pam_ldap (MDKSA-2006:201)

Pamldap does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver. This might lead to an...

Mandrake Linux Security Advisory : gzip (MDKSA-2006:167)

NULL Dereference CVE-2006-4334 A stack modification vulnerability where a stack buffer can be modified out of bounds, but not in the traditional stack overrun sense exists in the LZH decompression support of gzip. CVE-2006-4335 A .bss buffer underflow exists in gzip's pack support, where a loop...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:011)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 1.5.0.9. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...