Mandrake Linux Security Advisory : pcre (MDKSA-2007:211)

Multiple vulnerabilities were discovered by Tavis Ormandy and Will Drewry in the way that pcre handled certain malformed regular expressions. If an application linked against pcre, such as Konqueror, parses a malicious regular expression, it could lead to the execution of arbitrary code as the us...

Mandrake Linux Security Advisory : bind (MDKSA-2007:100)

A vulnerability in ISC BIND 9.4.0, when recursion is enabled, could allow a remote attacker to cause a denial of service daemon exit via a certain sequence of queries. BIND 9.4.1, which corrects this issue, is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

MDKA-2007:063 : mdkonline

The Mdkonline applet, mdkapplet, wrongly logged passwords for authenticated media via syslog. This update fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDKA-2007:129 : acpid

The acpid daemon wrote a lot of information about ACPI events in the system logs, making harddisks too busy on laptops. This update package suppresses these events logs in the default setup, and enables them in debug mode only. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

Mandrake Linux Security Advisory : apache (MDKSA-2007:127)

The recallheaders function in modmemcache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously-used data, which could be used to obtain potentially sensitive information by unauthorized users. Updated packages have...

Mandrake Linux Security Advisory : wpa_supplicant (MDKSA-2007:245)

Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 allows remote attackers to cause a denial of service crash via crafted TSF data. Updated package fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandrake Linux Security Advisory : tomcat5 (MDKSA-2007:241)

A number of vulnerabilities were found in Tomcat : A directory traversal vulnerability, when using certain proxy modules, allows a remote attacker to read arbitrary files via a .. dot dot sequence with various slash, backslash, or url-encoded backslash characters CVE-2007-0450; affects Mandriva...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:202)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.8. This update provides the latest Firefox to correct these issues. As well, it provides Firefox 2.0.0.8 for older products. %NASLMINLEVEL 70300 C Tenable Network Security,...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:226)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The tcpsacktagwritequeue function in the Linux kernel 2.6.21 through 2.6.23.7 allows remote attackers to cause a denial of service via crafted ACK responses that trigger a NULL pointer dereference CVE-2007-5501. To updat...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

MDKA-2007:028 : openssl

This update fixes a problem with OpenSSL and the 3des cipher. Among other problems, ssh would stop working when using this cipher with protocol 1. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDKA-2007:125 : ia_ora-gnome

An invalid memory disallocation in the IaOra GTK theme could cause a crash in the GIMP when using the GIMP Small theme. This updated package corrects the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDKA-2007:121 : foo2zjs

Due to a change of URLs on foo2zjs project, the firmware download for some common printers was failing, when configuring such printers with printerdrake. This update packages fix the issue by updating those URLs. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

MDKA-2007:067 : rsh

The rsh-server package contained incorrect PAM authentication configuration files that prevented clients from being able to access the server. The updated package contains corrected versions of these configuration files and allows correct access to the server. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

MDKA-2007:115 : sound-juicer

A bug in sound-juicer could lead to locking the CD drive, preventing erasing or rewriting rewritable medias in it. This package fixes this bug and includes other stability fixes and translation updates. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is n...

MDKA-2007:057 : xinitrc

The xdm scripts from the xinitrc package were not calling the sessreg utility, which is responsible for recording user logins on wtmp, correctly. This would prevent logins being registered when in graphical mode. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Mandrake Linux Security Advisory : koffice (MDKSA-2007:222)

Alin Rad Pop found several flaws in how PDF files are handled in koffice. An attacker could create a malicious PDF file that would cause koffice to crash or potentially execute arbitrary code when opened. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : xpdf (MDKSA-2007:219)

Alin Rad Pop found several flaws in how PDF files are handled in xpdf. An attacker could create a malicious PDF file that would cause xpdf to crash or potentially execute arbitrary code when opened. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Networ...

MDKA-2007:060 : gnome-vfs2

Unionfs filesystems were not being recognized as supporting trash for GNOME applications. This was preventing the Flash-based product to have a fully functional trash under the GNOME desktop environment. This update fixes the bug and improves performance for XFS filesystem users as well...

MDKA-2007:044 : rfbdrake

rfbdrake used to crash when displaying error messages. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...