MDVA-2008:051 : silc-toolkit

The silc libraries for Mandriva Linux 2008.1 contained an obsolete patch for a bug that was already fixed, preventing the libraries from connecting to the silc network. This update removes the obsolete patch, restoring correct functionality of the libraries. %NASLMINLEVEL 70300 @DEPRECATED@ This...

MDVA-2008:044 : giftrans

The giftrans package was using the wrong path to the color definition file and couldn't be used at all. This update uses the correct path. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

MDVA-2009:009 : kdemultimedia

A bug in KDE 3.5.10 as shipped with Mandriva Linux 2009.0, using the lame encode with the audiocd kioslave gives a noise sound as output. This updates fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disable...

MDVA-2009:015 : openct

This update fixes issue with a non-LSB initscript of openct, which could cause init to switch to non LSB compat mode, and result in a loop between resolvconf and network bug 47299. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDVA-2008:164 : rpm

This update provides Lzma payload support to rpm, which allows for updating to Mandriva Linux 2009 from Mandriva Linux 2008, or allows for creating 2009-based chroots on a 2008-based host. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Mandriva Linux Security Advisory : nfs-utils (MDVSA-2009:060)

A security vulnerability has been identified and fixed in nfs-utils, which caused TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions CVE-2008-4552. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:124)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Linux Security Advisory : wml (MDVSA-2008:076)

Two vulnerabilities were found in the Website META Language WML package that allowed local users to overwrite arbitrary files via symlink attacks. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandriva Linux Security Advisory : openafs (MDVSA-2008:207)

A race condition in OpenAFS 1.3.40 through 1.4.5 allowed remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks CVE-2007-6599. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Securit...

Mandriva Linux Security Advisory : gedit (MDVSA-2009:039)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current gedit working directory CVE-2009-0314. This update...

Mandriva Linux Security Advisory : avahi (MDVSA-2009:076)

A security vulnerability has been identified and fixed in avahi which could allow remote attackers to cause a denial of service network bandwidth and CPU consumption via a crafted legacy unicast mDNS query packet CVE-2009-0758. The updated packages have been patched to prevent this. %NASLMINLEVEL...

Mandriva Linux Security Advisory : glib2.0 (MDVSA-2009:080)

Multiple integer overflows in GLib's Base64 encoding and decoding functions enable attackers possibly remote ones, depending on the applications glib2 is linked against with - mostly GNOME ones either to cause denial of service and to execute arbitrary code via an untrusted input CVE-2008-4316...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2008:192)

A heap-based buffer overflow was found in how libxml2 handled long XML entity names. If an application linked against libxml2 processed untrusted malformed XML content, it could cause the application to crash or possibly execute arbitrary code CVE-2008-3529. The updated packages have been patched...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2008:231)

Drew Yao of the Apple Product Security Team found two flaws in libxml2. The first is a denial of service flaw in libxml2's XML parser. If an application linked against libxml2 were to process certain malformed XML content, it cause the application to enter an infinite loop CVE-2008-4225. The seco...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:044)

The waittaskstopped function in the Linux kernel before 2.6.23.8 checks a TASKTRACED bit instead of an exitstate value, which allows local users to cause a denial of service machine crash via unspecified vectors. NOTE: some of these details are obtained from third-party information. CVE-2007-5500...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2008:123)

Stefan Cornelius discovered two buffer overflows in Imlib's image loaders for PNM and XPM images, which could possibly result in the execution of arbitrary code CVE-2008-2426. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : gstreamer0.10-plugins-base (MDVSA-2009:085)

Integer overflows in gstreamer0.10-plugins-base Base64 encoding and decoding functions related with glib2.0 issue CVE-2008-4316 may lead attackers to cause denial of service. Altough vector attacks are not known yet CVE-2009-0586. This update provide the fix for that security issue. %NASLMINLEVEL...

Mandriva Linux Security Advisory : php (MDVSA-2009:022)

A vulnerability in PHP allowed context-dependent attackers to cause a denial of service crash via a certain long string in the glob or fnmatch functions CVE-2007-4782. A vulnerability in the cURL library in PHP allowed context-dependent attackers to bypass safemode and openbasedir restrictions an...

Mandriva Linux Security Advisory : bind (MDVSA-2009:037)

Internet Systems Consortium ISC BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:069)

Multiple memory management flaws were found in the GSSAPI library used by Kerberos that could result in the use of already freed memory or an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5901, CVE-2007-5971. A flaw was...