MDKA-2005:050 : scim-qtimm

Due to a bug in the RPM requires for the scim-qtimm package, it was only installable on i586 platforms, and not on x8664 due to differences in the naming for libqt3 vs. lib64qt3. This update corrects the requires allowing the package to be installed on Mandriva Linux 2006/x8664. %NASLMINLEVEL...

MDKA-2006:050 : ical

The Ical package in Mandriva Linux 2007 fails to run due to old code that does not work with current versions of TCL. Additionally, the application did not appear in the menu and the URL was obsolete. This updated package fixes these issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2007:005 : nmap

The version of nmap shipped with Mandriva Linux 2007 was built against the system copies of the libpcap and libdnet libraries. However, nmap actually requires changes to be made to these libraries which have not yet been made to the upstream versions, and consequently should be compiled against i...

Mandrake Linux Security Advisory : libgsf (MDKSA-2006:220)

'infamous41md' discovered a heap buffer overflow vulnerability in libgsf, a GNOME library for reading and writing structured file formats, which could lead to the execution of arbitrary code. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable Network...

[ MDKSA-2007:028 ] - Updated ulogd packaged to address buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:028 http://www.mandriva.com/security/ Package : ulogd Date : January 26, 2007 Affected: Corporate 4.0 Problem Description: Buffer overflow in ulogd has unknown impact and attack vectors related to "improper...

[ MDKSA-2007:019 ] - Updated pdftohtml packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:019 http://www.mandriva.com/security/ Package : pdftohtml Date : January 18, 2007 Affected: 2006.0, 2007.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in...

[ MDKSA-2007:022 ] - Updated tetex packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:022 http://www.mandriva.com/security/ Package : tetex Date : January 18, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xp...

[ MDKSA-2007:021 ] - Updated xpdf packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:021 http://www.mandriva.com/security/ Package : xpdf Date : January 18, 2007 Affected: 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1...

Neon LibNeon非ASCII字符URI数据远程拒绝服务漏洞

Neon LibNeon存在远程拒绝服务问题。 Neon LibNeon当处理包含非ASCII字符的URI数据时存在漏洞，攻击者可以利用漏洞使使用此库的应用程序崩溃，造成拒绝服务攻击。 Neon Client Library 0.26.2 Neon Client Library 0.26.1 Neon Client Library 0.26 MandrakeSoft Linux Mandrake 2007.0 x8664 MandrakeSoft Linux Mandrake 2007.0 Mandriva Linux可参考如下公告：...

[ MDKSA-2007:017 ] - Updated wget packages fix ftp vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:017 http://www.mandriva.com/security/ Package : wget Date : January 15, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: The ftpsyst function in...

[ MDKSA-2007:004 ] - Updated geoip packages fix geoipupdate vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:004 http://www.mandriva.com/security/ Package : geoip Date : January 8, 2007 Affected: Corporate 4.0 Problem Description: Dean Gaudet discovered the geoipupdate utility fails to do sanity checking on the...

[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:233 http://www.mandriva.com/security/ Package : dbus Date : December 18, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability was discovered in D-Bus that could be...

[ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:227 http://www.mandriva.com/security/ Package : kdegraphics Date : December 11, 2006 Affected: 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Stack overflow in the KFILE JPEG kfilejpeg plugin in...

[ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:225 http://www.mandriva.com/security/ Package : ruby Date : December 6, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Another vulnerability has been discovered in the CGI...

[ MDKSA-2006:210 ] - Updated syslinux packages to fix embedded libpng vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:210 http://www.mandriva.com/security/ Package : syslinux Date : November 16, 2006 Affected: 2007.0 Problem Description: SYSLINUX is a boot loader for the Linux operating system which operates off an...

[ MDKSA-2006:212 ] - Updated doxygen packages to fix embedded libpng vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:212 http://www.mandriva.com/security/ Package : doxygen Date : November 16, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Doxygen is a documentation system for C, C++ and...

[ MDKSA-2006:213 ] - Updated chromium packages to fix embedded libpng vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:213 http://www.mandriva.com/security/ Package : chromium Date : November 16, 2006 Affected: 2007.0, Corporate 3.0 Problem Description: Chromium is an OpenGL-based shoot them up game with fine graphics. It is...

[ MDKSA-2006:189 ] - Updated xsupplicant fixes possible remote root stack smash vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:189 http://www.mandriva.com/security/ Package : xsupplicant Date : October 27, 2006 Affected: 2006.0, 2007.0 Problem Description: Yannick Van Osselaer discovered a stack overflow in Xsupplicant, which could...

[Full-disclosure] [ MDKSA-2006:180 ] - Updated php packages fix integer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:180 http://www.mandriva.com/security/ Package : php Date : October 5, 2006 Affected: 2006.0, 2007.0 Problem Description: An integer overflow was discovered in the PHP memory handling routines. If a script ca...

[Full-disclosure] [ MDKSA-2006:162 ] - Updated php packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:162 http://www.mandriva.com/security/ Package : php Date : September 7, 2006 Affected: 2006.0, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The 1 fileexists and 2 imapreopen functions in PH...