Mandrake Linux Security Advisory : ntp (MDKSA-2006:178)

Openssl recently had several vulnerabilities which were patched CVE-2006-2937,2940,3738,4339, 4343. Some versions of ntp are built against a static copy of the SSL libraries. As a precaution an updated copy built against the new libraries in being made available. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : gstreamer-ffmpeg (MDKSA-2006:174)

Gstreamer-ffmpeg uses an embedded copy of ffmpeg and as such has been updated to address the following issue: Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified...

Mandrake Linux Security Advisory : rpm (MDKSA-2006:200)

A heap-based buffer overflow was discovered in librpm when the LANG or LCALL environment variable is set to ruRU.UTF-8 and possibly other locales, which could allow for user-assisted attackers to execute arbitrary code via crafted RPM packages. Updated packages have been patched to correct this...

Mandrake Linux Security Advisory : postgresql (MDKSA-2007:037-1)

Jeff Trout discovered that the PostgreSQL server did not sufficiently check data types of SQL function arguments in some cases. A user could then exploit this to crash the database server or read out arbitrary locations of the server's memory, which could be used to retrieve database contents tha...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2006:168)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 1.5.0.7. This update provides the latest Firefox to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandrake Linux Security Advisory : ruby (MDKSA-2006:192)

The CGI library in Ruby 1.8 allowed a remote attacker to cause a Denial of Service via an HTTP request with a multipart MIME body that contained an invalid boundary specifier, which would result in an infinite loop and CPU consumption. Updated packages have been patched to correct this issue...

Mandrake Linux Security Advisory : mpg123 (MDKSA-2007:032)

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandrake Linux Security Advisory : kdenetwork (MDKSA-2007:009)

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. Updated packages are patched to address this issue. %NASLMINLEVEL...

Mandrake Linux Security Advisory : chromium (MDKSA-2006:213)

Chromium is an OpenGL-based shoot them up game with fine graphics. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities : Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent...

MDKA-2006:040 : wxPythonGTK

A problem with wxPythonGTK would prevent some python programs, such as pyshell, from starting due to incorrect path locations. The updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabl...

MDKA-2006:032 : epiphany-extensions

Recently, epiphany was updated to work with the latest Mozilla Firefox however new epiphany-extensions packages were not available. This update provides updated epiphany-extensions for epiphany. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDKA-2005:042 : mozilla-thunderbird-nb

Due to a packaging bug, the mozilla-thunderbird-nb package could not be installed. This update corrects the bug allowing the package to be installed. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. ...

MDKA-2006:067 : lsb

When the xorg-x11 package was broken up into subpackages, libGL.so.1, which is required by LSB, ended up not being a requirement of the lsb meta-package. This update corrects this issue and should allow lsblibchk to run without failures. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2007:004 : mesa

There was a problem with mesa, where OpenGL applications would crash for users having some i965G chipsets. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled ...

MDKA-2006:006 : xorg-x11

Issues have been reported with display corruption for various cards, including several ATI and Nvidia cards when using the free drivers. There was also an issue with the Greek keyboard layout. These should be corrected by the upstream 6.9.0 final, which this package is based on. Updated packages...

MDKA-2006:054 : audacity

For the French locale, menu items which contained accented characters do not show up in the Audacity sound editor. This is because the French translation file was not in the correct character encoding. This issue is corrected in the updated packages. %NASLMINLEVEL 999999 @DEPRECATED@ This script...

MDKA-2007:012 : glibc

The version of glibc shipped with Mandriva 2007 has a bug that prevents the system from passing the lsb-runtime test suite T.ttynamer. This update also includes sparc64 updates and Unicode 5.0 support. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is no...

MDKA-2006:055 : rpmdrake

Several bugs were fixed in rpmdrake: - various people saw crashes due to invalid UTF-8 strings 26099 - edit-urpm-sources.pl didn't start if urpmi.cfg did not exist 27336 - MandrivaUpdate got several fixes: o it was impossible to select an update where there was only one group 26135 o all updates...

MDKA-2007:006 : desktop-common-data

When using 'Discovery' menus, there is no menu item for Writer in the Office category. Updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security...

MDKA-2006:045 : coreutils

The coreutils package lacked several features due to a build deficiency. As a result, the su program was not linked against the PAM library, making it impossible for su to make use of advanced authentication features that rely on the PAM library. As well, the cp system utility did not keep extend...