Mandriva Linux Security Advisory : kernel (MDVSA-2008:234)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Buffer overflow in the hfsplusfindcat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service memory corruption or system crash via an hfsplus filesystem image...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:152)

A number of vulnerabilities were discovered in Wireshark that could cause it to crash while processing malicious packets CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145. This update provides Wireshark 1.0.2, which is not vulnerable to these issues...

Mandriva Linux Security Advisory : libxslt (MDVSA-2008:160)

Chris Evans of the Google Security Team found a vulnerability in the RC4 processing code in libxslt that did not properly handle corrupted key information. A remote attacker able to make an application linked against libxslt process malicious XML input could cause the application to crash or...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:219)

A vulnerability that was discovered in xine-lib that allowed remote RTSP servers to execute arbitrary code via a large streamid SDP parameter also affects MPlayer CVE-2008-0073. Several integer overflows were discovered by Felipe Andres Manzano in MPlayer's Real video stream demuxing code. These...

Mandriva Linux Security Advisory : madwifi-source (MDVSA-2008:007)

MadWifi prior to 0.9.3.3 allowed remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which would trigger an assertion error. Updated packages have been updated to 0.9.3.3 to correct this issue...

Mandriva Linux Security Advisory : freetype2 (MDVSA-2008:121)

Multiple vulnerabilities were discovered in FreeType's Printer Font Binary PFB font-file format parser. If a user were to load a carefully crafted font file with a program linked against FreeType, it could cause the application to crash or potentially execute arbitrary code CVE-2008-1806,...

Mandriva Linux Security Advisory : net-snmp (MDVSA-2008:225)

A denial of service vulnerability was discovered in how Net-SNMP processed GETBULK requests. A remote attacker with read access to the SNMP server could issue a specially crafted request which would cause snmpd to crash CVE-2008-4309. Please note that for this to be successfully exploited, an...

Mandriva Linux Security Advisory : sarg (MDVSA-2009:073)

Various stack-based buffer overflows were discovered and corrected in sarg : Additionally the previous release fixed CVE-2008-1922, CVE-2008-7249, CVE-2008-7250 The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2009:083)

A number of security vulnerabilities have been discovered in previous versions, and corrected in the latest Mozilla Thunderbird program, version 2.0.0.21 CVE-2009-0040, CVE-2009-0776, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0352, CVE-2009-0353. This update provides th...

Mandriva Linux Security Advisory : speex (MDVSA-2008:094)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:020)

Two vulnerabilities discovered in xine-lib allow remote execution of arbitrary code : Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the...

MDVA-2008:040 : monitor-edid

This update adds support for getting EDID information from a different DDC port and uses it by default to also get port 1. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Linux Security Advisory : krb5 (MDVSA-2009:082)

The spnegogssacceptseccontext function in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via invalid ContextFlags data in the reqFlags field in a negTokenInit...

MDVA-2008:001 : urpmi

urpmi --auto-update was strangely broken in some uncertain cases see bug 36134. urpmi --limit-rate had a regression introduced in version 4.9.12. The updated package fixes these issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2008:168 : sound-scripts

The sound initialization scripts provided with Mandriva Linux 2009 activate the Analog Loopback channel when it is present. This channel is present on most audio chipsets supported by the snd-hda-intel driver, which are commonly used on recent systems. When active, this channel plays back the sou...

MDVA-2008:157 : hplip

It is mandatory to use UTF-8 encoding in communication on newer cups versions. It prevents hplip from working properly in non-UTF-8 environments. The updated packages fix this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a securi...

MDVA-2008:151 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain new Daylight Savings Time information and Time Zone information for some locations. These updated packages contain the new information. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecate...

MDVA-2008:113 : beagle

Beagle provides extensions for both Mozilla Firefox and Mozilla Thunderbird, that depend on the exact version of these programs. Rebuilding these packages did not occur with the lastest Mozilla Firefox and Mozilla Thunderbird security advisories, so these packages are being provided rebuilt again...

MDVA-2009:001-1 : dos2unix

The dos2unix command removes the last line of a file if no newline characters follow. This package fixes the issue. Update: This update now provides corrected packages for Mandriva Linux 2008.x and Corporate Server 4.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

MDVA-2008:018 : mysql

Updated MySQL packages are being made available that fix a number of upstream bugs, as well as some minor packaging bugs. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...