[Full-disclosure] [ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:134 http://www.mandriva.com/security/ Package : xfsdump Date : June 21, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: xfsfsr in xfsdump creates a .fsr temporary directory with insecure...

[ MDKSA-2007:132 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:132 http://www.mandriva.com/security/ Package : madwifi-source Date : June 21, 2007 Affected: 2007.0, 2007.1 Problem Description: The 802.11 network stack in MadWifi prior to 0.9.3.1 would alloa remote...

[ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:129 http://www.mandriva.com/security/ Package : jasper Date : June 19, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: A function in the JasPer JPEG-2000 library before 1.900 could allow a...

MDKA-2007:055 : gnome-games

A packaging error was disabling the high score support in various games shipped in the gnome-games package. This issue is fixed, as well as several other bugs and translation additions. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDKA-2007:054 : dkms

The dkms packages that shipped with Mandriva Linux 2007.0 and 2007.1 did not work with kernel versions of 2.6.21 and higer due to the use of an obsolete Makefile target. The updated packages fix this limitation. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

[Full-disclosure] [ MDKSA-2007:122 ] - Updated gd packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:122 http://www.mandriva.com/security/ Package : gd Date : June 13, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A flaw in libgd2 was found by Xavier Roche where it would n...

[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:097 http://www.mandriva.com/security/ Package : xscreensaver Date : May 2, 2007 Affected: 2007.0, 2007.1, Corporate 3.0 Problem Description: A problem with the way xscreensaver verifies user passwords was...

MDKA-2007:025 : x11-data-xkbdata

The x11-data-xkbdata package had an error on the default qwertz romainian layout making it impossible to load; this is now corrected. As well, the tifinagh layouts were missing and have been included with this update. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Mandrake Linux Security Advisory : tightvnc (MDKSA-2007:080-1)

Local exploitation of a memory corruption vulnerability in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server, typically root. The vulnerability exists in the ProcXCMiscGetXIDList function in the XC-MISC extension. This request is used...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2007:079-1)

Local exploitation of a memory corruption vulnerability in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server, typically root. The vulnerability exists in the ProcXCMiscGetXIDList function in the XC-MISC extension. This request is used...

[ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:068 http://www.mandriva.com/security/ Package : squid Date : March 22, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Due to an internal error...

MDKA-2007:018-1 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2007 for certain time zones. These updated packages contain the new information. Update: This update addresses timezone files such as Canada/Mountain tha...

[ MDKSA-2007:045 ] - Updated gnomemeeting packages fix string vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:045 http://www.mandriva.com/security/ Package : gnomemeeting Date : February 21, 2007 Affected: Corporate 3.0 Problem Description: A format string flaw was discovered in how GnomeMeeting processes certain...

MDKA-2007:014 : mandriva-doc

Due to changes in the structure of the documentation, the Help buttons of the Software Management tools led to broken links. This update fixes the links catalog system so the inline help works again. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDKA-2006:037 : glibc

Updated glibc packages are being provided to ensure that kernel and user-space tools are in sync. This update also fixes a bug present on x8664 platforms where strncmp is mis-optimized. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDKA-2005:047 : apcupsd

The apcupsd package as shipped with Mandriva Linux 2006 was missing the main apcupsd configuration file. As a result, those upgrading from earlier versions would have their existing configuration file moved to /etc/apcupsd/apcupsd.conf.rpmsave with no new configuration file to replace it, which...

MDKA-2007:011 : tripwire

The version of tripwire included with Mandriva 2007 would hang while generating keys. The problem has been corrected by avoiding using optimization at compile-time. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled ...

MDKA-2006:053 : dbus

On Mandriva Linux 2007.0, the path for D-Bus system bus socket was not following D-Bus specification. This could cause some implementation of the D-Bus specification to not detect the system bus correctly. This updated package ensures the location of the system bus is exported through...

MDKA-2006:041 : smbldap-tools

This update fixes a problem with the smbldap-tools package shipped with Mandriva Linux 2006 where it would issue warnings if the smb.conf configuration file had continuation lines using the '' character. The updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has be...

MDKA-2006:020 : libaio

The libaio package is being made available as an official/main package to provide out-of-the-box support for Oracle Express in Mandriva Linux 2006. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...