Mandriva Linux Security Advisory : dokuwiki (MDVSA-2015:185)

Updated dokuwiki packages fix security vulnerabilities : inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call CVE-2014-8761. The ajaxmediadiff function in DokuWiki...

[ MDVSA-2015:009 ] krb5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:009 http://www.mandriva.com/en/support/security/ Package : krb5 Date : January 8, 2015 Affected: Business Server 1.0 Problem Description: Updated krb5 packages fix security vulnerability: In MIT krb5, when...

Mandriva Linux Security Advisory : mariadb (MDVSA-2014:210)

Multiple vulnerabilities has been discovered and corrected in mariadb : Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS CVE-2014-6464...

[ MDVSA-2014:201 ] kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:201 http://www.mandriva.com/en/support/security/ Package : kernel Date : October 21, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linux...

Mandriva Linux Security Advisory : libvirt (MDVSA-2014:195)

Multiple vulnerabilities has been discovered and corrected in libvirt : An out-of-bounds read flaw was found in the way libvirt's qemuDomainGetBlockIoTune function looked up the disk index in a non-persistent live disk configuration while a persistent disk configuration was being indexed. A remot...

Mandriva Linux Security Advisory : hplip (MDVSA-2014:023)

Updated hplip packages fix security vulnerabilities : It was discovered that the HPLIP Polkit daemon incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files CVE-2013-6402. It was discovered that HPLIP contained an upgrade tool that would...

Mandriva Linux Security Advisory : hplip (MDVSA-2013:088)

This hplip update addresses the folloving issues : Print/Fax queues can now be analyzed by running hp-diagnose-queues fixes some issues and duplex scanning support with newer AIO devices fixes Wireless configuration using hp-wificonfig command for HP Deskjet 3000 J310 series and HP Deskjet 3050...

Mandriva Linux Security Advisory : x11-server (MDVSA-2013:139)

This fixes a format string vulnerability in the LogVHdrMessageVerb function in os/log.c when handling input device names in X.Org X11 server CVE-2012-2118. MBS1 is not vulnerable to arbitrary code execution via this vulnerability because of the compiler options that were used to build it, but it...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2012:095)

Multiple security issues were identified and fixed in OpenJDK icedtea6 : - S7079902, CVE-2012-1711: Refine CORBA data models - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement - S7143606, CVE-2012-1717:...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2012:075)

Multiple vulnerabilities has been found and corrected in ffmpeg : The Matroska format decoder in FFmpeg does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file CVE-2011-3362, CVE-2011-3504. cavsdec.c in libavcodec in FFmpeg allows remote...

MDVA-2011:093-1 : psmisc

This is a bugfix and maintenance update of the psmisc packages that addresses the following issues: Fixed bug with fuser is returning an incorrect return value when using -s option 64846 Update: Packages for 2010.2 is also being provided. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...

Mandriva Linux Security Advisory : openldap (MDVSA-2011:055)

Multiple vulnerabilities has been identified and fixed in openldap : chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass...

MDVA-2011:011 : mono-tools

A dependency problem was discovered with mono-tools in that it required a much older version of libxulrunner than the current latest one, this advisory addresses this problem. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...

Mandriva Linux Security Advisory : dhcp (MDVSA-2011:022)

A vulnerability has been found and corrected in dhcp : The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service assertion failure and daemon crash by sending a message over...

MDVA-2011:002 : cyrus-sasl

The saslauth daemon cyrus-sasl could crash under heavy load. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=490 The updated packages has been patched to address this...

MDVA-2010:241 : nss

A bug it the NSS source rpm package did not pull in the latest and required version of NSPR 4.8.6 when building NSS 61964. Additionally the rootcerts package was updated with the latest certdata.txt file from the mozilla cvs 20101202 and is also provided with this advisory. %NASLMINLEVEL 70300...

MDVA-2010:228 : firefox

This is a maintenance and bugfix release of firefox that upgrades firefox to the 3.6.12 version and adds missing localization packages for the Georgian, Kurdish, Occitan and Serbian languages. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn...

[ MDVSA-2010:224 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:224 http://www.mandriva.com/security/ Package : php Date : November 9, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered...

Mandriva Linux Security Advisory : apr-util (MDVSA-2010:192)

A denial of service attack against aprbrigadesplitline was discovered in apr-util CVE-2010-1623. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=4 90 The update...

MDVA-2010:196 : firefox

This is a maintenance release of mozilla firefox and thunderbird that upgrades firefox to 3.6.10 and thunderbird to 3.0.8. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...