Mandriva Linux Security Advisory : zarafa (MDVSA-2015:040)

Updated zarafa packages fix security vulnerability : Robert Scheck discovered a flaw in Zarafa WebAccess = 7.0.0 and Zarafa WebApp that could allow a remote unauthenticated attacker to exhaust the disk space of /tmp CVE-2014-9465. This update also adds some patches from Robert Scheck which correc...

Mandriva Linux Security Advisory : cabextract (MDVSA-2015:041)

Updated cabextract packages fix security vulnerability : Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

Mandriva Linux Security Advisory : java-1.7.0-openjdk (MDVSA-2015:033)

Updated java-1.7.0 packages fix security vulnerabilities : A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions CVE-2014-6601. Multiple improper...

Mandriva Linux Security Advisory : libvirt (MDVSA-2015:035)

Updated libvirt packages fix security vulnerability : The XML getters for for save images and snapshots objects don't check ACLs for the VIRDOMAINXMLSECURE flag and might possibly dump security sensitive information. A remote attacker able to establish a connection to libvirtd could use this flaw...

Mandriva Linux Security Advisory : jasper (MDVSA-2015:034)

Updated jasper packages fix security vulnerabilities : An off-by-one flaw, leading to a heap-based buffer overflow, was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Mandriva Linux Security Advisory : php (MDVSA-2015:032)

Multiple vulnerabilities have been discovered and corrected in php : sapi/cgi/cgimain.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid...

Mandriva Linux Security Advisory : aircrack-ng (MDVSA-2015:028)

Updated aircrack-ng package fixes security vulnerabilities : A length parameter inconsistency in Aircrack-ng before 1.2-rc1 at aireplay tcptest which may lead to remote code execution CVE-2014-8322. A missing check for data format in Aircrack-ng before 1.2-rc1 at buddy-ng which may lead to denial...

Mandriva Linux Security Advisory : busybox (MDVSA-2015:031)

Updated busybox packages fix security vulnerability : The modprobe command in busybox before 1.23.0 uses the basename of the module argument as the module to load, allowing arbitrary modules, even when some kernel subsystems try to prevent this CVE-2014-9645. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : bugzilla (MDVSA-2015:030)

Updated bugzilla packages fix security vulnerability : Some code in Bugzilla does not properly utilize 3 arguments form for open and it is possible for an account with editcomponents permissions to inject commands into product names and other attributes CVE-2014-8630. %NASLMINLEVEL 70300 C Tenabl...

[ MDVSA-2015:025 ] mpfr

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:025 http://www.mandriva.com/en/support/security/ Package : mpfr Date : January 15, 2015 Affected: Business Server 1.0 Problem Description: Updated mpfr packages fix security vulnerability: A buffer overflow...

[ MDVSA-2015:024 ] libsndfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:024 http://www.mandriva.com/en/support/security/ Package : libsndfile Date : January 15, 2015 Affected: Business Server 1.0 Problem Description: Updated libsndfile packages fix security vulnerabilities:...

[ MDVSA-2015:006 ] mediawiki

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:006 http://www.mandriva.com/en/support/security/ Package : mediawiki Date : January 8, 2015 Affected: Business Server 1.0 Problem Description: Updated mediawiki packages fix security vulnerabilities: In...

[ MDVSA-2015:023 ] libvirt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:023 http://www.mandriva.com/en/support/security/ Package : libvirt Date : January 15, 2015 Affected: Business Server 1.0 Problem Description: Updated libvirt packages fix security vulnerability: The...

Mandriva Linux Security Advisory : libvirt (MDVSA-2015:023)

Updated libvirt packages fix security vulnerability : The qemuDomainMigratePerform and qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors CVE-2014-8136...

Mandriva Linux Security Advisory : mpfr (MDVSA-2015:025)

Updated mpfr packages fix security vulnerability : A buffer overflow was reported in mpfr. This is due to incorrect GMP documentation for mpnsetstr about the size of a buffer CVE-2014-9474. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Mandriva Linux Security Advisory : untrf (MDVSA-2015:026)

NOTE: No description provided by vendor. Update copy of untrf to handle unspecified security vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security Advisory MDVSA-2015:026. The text...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2015:024)

Updated libsndfile packages fix security vulnerabilities : libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user-supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service CVE-2014-9496...

[ MDVSA-2015:017 ] libevent

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:017 http://www.mandriva.com/en/support/security/ Package : libevent Date : January 8, 2015 Affected: Business Server 1.0 Problem Description: Updated libevent packages fix security vulnerability: Andrew...

[ MDVSA-2015:005 ] subversion

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:005 http://www.mandriva.com/en/support/security/ Package : subversion Date : January 5, 2015 Affected: Business Server 1.0 Problem Description: Updated subversion packages fix security vulnerabilities: A NUL...

[ MDVSA-2015:014 ] libjpeg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:014 http://www.mandriva.com/en/support/security/ Package : libjpeg Date : January 8, 2015 Affected: Business Server 1.0 Problem Description: Updated libjpeg packages fix security vulnerability: Passing a...