Mandriva Linux Security Advisory : poppler (MDVSA-2008:146)

A memory management issue was found in libpoppler by Felipe Andres Manzano that could allow for the execution of arbitrary code with the privileges of the user running a poppler-based application, if they opened a specially crafted PDF file CVE-2008-2950. The updated packages have been patched to...

Mandriva Linux Security Advisory : SDL_image (MDVSA-2008:040)

The LWZReadByte and IMGLoadLBMRW functions in SDLimage contain a boundary error that could be triggered to cause a static buffer overflow and a heap-based buffer overflow. If a user using an application linked against the SDLimage library were to open a carefully crafted GIF or IFF ILBM file, the...

Mandriva Linux Security Advisory : python-django (MDVSA-2008:185)

A cross-site request forgery vulnerability was discovered in Django that, if exploited, could be used to perform unrequested deletion or modification of data. Updated versions of Django will now discard posts from users whose sessions have expired, so data will need to be re-entered in these case...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:007)

A flaw was found in how NTP checked the return value of signature verification. A remote attacker could use this to bypass certificate validation by using a malformed SSL/TLS signature CVE-2009-0021. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:196)

Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. The updated packages have been patched to fix this issue. %NASLMINLEVEL 70300 C Tenable...

Mandriva Linux Security Advisory : opensc (MDVSA-2008:183)

Chaskiel M Grundman found that OpenSC would initialize smart cards with the Siemens CardOS M4 card operating system without proper access rights. This allowed everyone to change the card's PIN without first having the PIN or PUK, or the superuser's PIN or PUK CVE-2008-2235. Please note that this...

[ MDVSA-2009:092 ] ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:092 http://www.mandriva.com/security/ Package : ntp Date : April 13, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: A vulnerability has been foun...

[ MDVSA-2009:091 ] mod_perl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:091 http://www.mandriva.com/security/ Package : modperl Date : April 12, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability has been found and corrected in modpe...

[ MDVSA-2009:089 ] opensc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:089 http://www.mandriva.com/security/ Package : opensc Date : April 9, 2009 Affected: 2008.0, 2008.1, 2009.0, Corporate 4.0 Problem Description: OpenSC before 0.11.7 allows physically proximate attackers to...

Mandriva Update for kdesdk MDVA-2008:093-1 (kdesdk)

Check for the Version of kdesdk OpenVAS Vulnerability Test Mandriva Update for kdesdk MDVA-2008:093-1 kdesdk Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for bzip2 MDVSA-2008:075 (bzip2)

Check for the Version of bzip2 OpenVAS Vulnerability Test Mandriva Update for bzip2 MDVSA-2008:075 bzip2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for rpmdrake MDVA-2008:061 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:061 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for timezone MDVA-2008:151 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2008:151 timezone Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openafs MDVA-2008:006-1 (openafs)

Check for the Version of openafs OpenVAS Vulnerability Test Mandriva Update for openafs MDVA-2008:006-1 openafs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Mandriva Update for mozilla-thunderbird MDVSA-2008:155 (mozilla-thunderbird)

Check for the Version of mozilla-thunderbird OpenVAS Vulnerability Test Mandriva Update for mozilla-thunderbird MDVSA-2008:155 mozilla-thunderbird Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for mandriva-kde-config MDVA-2008:027 (mandriva-kde-config)

Check for the Version of mandriva-kde-config OpenVAS Vulnerability Test Mandriva Update for mandriva-kde-config MDVA-2008:027 mandriva-kde-config Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for tetex MDKSA-2007:124 (tetex)

Check for the Version of tetex OpenVAS Vulnerability Test Mandriva Update for tetex MDKSA-2007:124 tetex Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for monitor-edid MDVA-2008:040 (monitor-edid)

Check for the Version of monitor-edid OpenVAS Vulnerability Test Mandriva Update for monitor-edid MDVA-2008:040 monitor-edid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for apache MDKSA-2007:127 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDKSA-2007:127 apache Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for digikam MDKA-2007:058 (digikam)

Check for the Version of digikam OpenVAS Vulnerability Test Mandriva Update for digikam MDKA-2007:058 digikam Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...