Mandriva Linux Security Advisory : amarok (MDVSA-2009:030-1)

Data length values in metadata Audible Audio media file .aa can lead to an integer overflow enabling remote attackers use it to trigger an heap overflow and enabling the possibility to execute arbitrary code CVE-2009-0135. Failure on checking heap allocation on Audible Audio media files .aa allow...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:104)

A race condition in the directory notification subsystem dnotify in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service OOPS and possibly gain privileges via unspecified vectors. CVE-2008-1375 The Linux kernel before 2.6.25.2 does not...

Mandriva Linux Security Advisory : evolution (MDVSA-2008:111)

Alan Rad Pop of Secunia Research discovered the following two vulnerabilities in Evolution : Evolution did not properly validate timezone data when processing iCalendar attachments. If a user disabled the Itip Formatter plugin and viewed a crafted iCalendar attachment, an attacker could cause a...

Mandriva Linux Security Advisory : pcre (MDVSA-2008:147)

Tavis Ormandy of the Google Security Team discovered a heap-based buffer overflow when compiling certain regular expression patterns. This could be used by a malicious attacker by sending a specially crafted regular expression to an application using the PCRE library, resulting in the possible...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2008:180-1)

Andreas Solberg found a denial of service flaw in how libxml2 processed certain content. If an application linked against libxml2 processed such malformed XML content, it could cause the application to stop responding CVE-2008-3281. Update : The original fix used to correct this issue caused some...

Mandriva Linux Security Advisory : blender (MDVSA-2008:204)

Stefan Cornelius of Secunia Research reported a boundary error when Blender processed RGBE images which could be used to execute arbitrary code with the privileges of the user running Blender if a specially crafted .hdr or .blend file were openedCVE-2008-1102. As well, multiple vulnerabilities...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:087)

A security vulnerability has been identified and fixed in OpenSSL, which could crash applications using OpenSSL library when parsing malformed certificates CVE-2009-0590. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandriva Linux Security Advisory : exiv2 (MDVSA-2008:006)

An integer overflow in the Exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : cups (MDVSA-2009:027)

A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file CVE-2009-0032. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : dbus (MDVSA-2008:213)

The D-Bus library did not correctly validate certain corrupted signatures which could cause a crash of applications linked against the D-Bus library if a local user were to send a specially crafted D-Bus request CVE-2008-3834. The updated packages have been patched to prevent this issue...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:228)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 2.x, version 2.0.0.18 CVE-2008-0017, CVE-2008-5012, CVE-2008-5013, CVE-2008-5014, CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021, CVE-2008-5022, CVE-2008-5023, CVE-2008-5024, CVE-2008-5052. This...

Mandriva Linux Security Advisory : samba (MDVSA-2009:042)

Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name CVE-2009-0022. This update provides samba 3.2.7 to address this issue. %NASLMINLEVEL 70300 C Tenable...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:226)

A denial of service condition was found in Ruby's regular expression engine. If a Ruby script tried to process a large amount of data via a regular expression, it could cause Ruby to enter an infinite loop and crash CVE-2008-3443. A number of flaws were found in Ruby that could allow an attacker ...

Mandriva Linux Security Advisory : sudo (MDVSA-2009:033)

A vulnerability has been identified in sudo which allowed - depending on the sudoers rules - a sudo-user to execute arbitrary shell commands as root CVE-2009-0034. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:215)

A number of vulnerabilities were discovered in Wireshark that could cause it to crash or abort while processing malicious packets CVE-2008-4680, CVE-2008-4681, CVE-2008-4682, CVE-2008-4683, CVE-2008-4684, CVE-2008-4685. This update provides Wireshark 1.0.4, which is not vulnerable to these issues...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:070)

A memory management flaw was found in the GSSAPI library used by Kerberos that could result in an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5971. A flaw was discovered in how the Kerberos krb5kdc handled Kerberos v4...

Mandriva Linux Security Advisory : nss_ldap (MDVSA-2008:049)

A race condition in nssldap, when used in applications that use pthread and fork after a call to nssldap, does not properly handle the LDAP connection, which might cause nssldap to return the wrong user data to the wrong process, giving one user access to data belonging to another user, in some...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:178)

Alin Rad Pop found an array index vulnerability in the SDP parser of xine-lib. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker could possibly execute arbitrary code with the privileges of the user using the program CVE-2008-0073. The ASF demuxer ...

Mandriva Linux Security Advisory : avahi (MDVSA-2009:031)

A vulnerability has been discovered in Avahi before 0.6.24, which allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0 CVE-2008-5081. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandriva Linux Security Advisory : cups (MDVSA-2008:051)

A flaw was found in how CUPS handled the addition and removal of remote printers via IPP that could allow a remote attacker to send a malicious IPP packet to the UDP port causing CUPS to crash. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network...