MDVA-2008:197 : mandriva-kde-config

On Mandriva Linux 2009.0, every time a web page was opened under Konqueror, or opened in a new tab, it showed the HTML code in an editor instead of the website. This update makes Konqueror display websites correctly instead of pure HTML code. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...

MDVA-2008:120 : draksnapshot

This update fixes several minor issues with draksnapshot, such as backups not being completed due to bad permissions. A number of fixes were done to the applet as well, including notifications showing as information instead of warnings. Draksnapshot now no longer auto-disables after configuring,...

MDVA-2008:093 : kdesdk

kdesdk packages in Mandriva Linux 2008 and 2008 Spring had packaging bugs which led to the subversion ioslave to not build and thus not be provided. The updated packages fixed the bugs and provide the subversion access ioslave. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

MDVA-2008:198 : openoffice.org

This update is the Mandriva OpenOffice.org 3.0 stable official release on Mandriva Linux 2009.0 and it holds some of following explained bug fixes related to openoffice.org-3.0-0.rc2.1mdv2009 packages: OpenOffice.org crashes on start up when the user interface is changed to the Greek language, th...

MDVA-2008:138 : mdkonline

The updated mdkonline package improves the upgrade process to Mandriva Linux 2009.0 and includes many other bugfixes and enhancements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Networ...

MDVA-2009:034 : alsa

This update upgrades ALSA packages to version 1.0.18, with minor bug fixes and enhancements, which can be looked in detail at http://www.alsa-project.org/main/index.php/Changesv1.0.18rc3v1.0.18 . Updated libalsa2 also contains fixes affecting, for example, the speaker-testing tool not working...

MDVA-2009:026-1 : samba

This update fixes two minor issues with samba. Package does not install from update because of missing dependency 47979. Fix dependencies because /usr/include/tdb.h was moved from libsmbclient0-devel to libtdb-devel and this led to a file conflict and prevented a smooth upgrade. This update fixes...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:044)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 3.x, version 3.0.5 CVE-2009-0352, CVE-2009-0353, CVE-2009-0354, CVE-2009-0355, CVE-2009-0356, CVE-2009-0357, CVE-2009-0358. This update provides the latest Mozilla Firefox 3.x to correct these issues. As...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:007)

A flaw was found in how NTP checked the return value of signature verification. A remote attacker could use this to bypass certificate validation by using a malformed SSL/TLS signature CVE-2009-0021. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandriva Linux Security Advisory : qemu (MDVSA-2009:008)

Security vulnerabilities have been discovered and corrected in VNC server of qemu version 0.9.1 and earlier, which could lead to denial-of-service attacks CVE-2008-2382, and make it easier for remote crackers to guess the VNC password CVE-2008-5714. The updated packages have been patched to preve...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:196)

Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. The updated packages have been patched to fix this issue. %NASLMINLEVEL 70300 C Tenable...

Mandriva Linux Security Advisory : apache (MDVSA-2008:016)

A number of vulnerabilities were found and fixed in the Apache 2.2.x packages : A flaw found in the modimagemap module could lead to a cross-site scripting attack on sites where modimagemap was enabled and an imagemap file was publically available CVE-2007-5000. A flaw found in the modstatus modu...

Mandriva Linux Security Advisory : dia (MDVSA-2009:040)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current dia working directory CVE-2008-5984. This update...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2008:157)

A vulnerability was found in how ffmpeg handled STR file demuxing. If a user were tricked into processing a malicious STR file, a remote attacker could execute arbitrary code with user privileges via applications linked against ffmpeg CVE-2008-3162. The updated packages have been patched to corre...

Mandriva Linux Security Advisory : kdelibs (MDVSA-2008:097)

A vulnerability was found in startkdeinit in KDE 3.5.5 through 3.5.9 where, if it was installed setuid root, it could allow local users to cause a denial of service or possibly execute arbitrary code CVE-2008-1671. By default, startkdeinit is not installed setuid root on Mandriva Linux, however...

Mandriva Linux Security Advisory : mailman (MDVSA-2008:061)

Multiple cross-site scripting XSS vulnerabilities were found in Mailman prior to version 2.1.10b1, which allow remote attackers to inject arbitrary web script or HTML via edting templates and the list's info attribute in the web administrator interface. The updated packages have been patched to...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:015)

Several vulnerabilities have been discovered in ffmpeg, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESIZE value CVE-2008-4867. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : pam_krb5 (MDVSA-2008:209-1)

Stphane Bertin discovered a flaw in the pamkrb5 existingticket configuration option where, if enabled and using an existing credential cache, it was possible for a local user to gain elevated privileges by using a different, local user's credential cache CVE-2008-3825. The updated packages have...

Mandriva Linux Security Advisory : blender (MDVSA-2009:038-1)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Blender working directory CVE-2008-4863. This updat...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:080)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.13. This update provides the latest Firefox to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...