Mandriva Linux Security Advisory : apache (MDVSA-2010:153)

Multiple vulnerabilities has been found and corrected in apache : The modcache and moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path CVE-2010-1452. modproxy in httpd in Apache HTTP Server...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2010:150)

A vulnerability has been discovered and corrected in libsndfile : The 1 htkreadheader, 2 alawinit, 3 ulawinit, 4 pcminit, 5 float32init, and 6 sdsreadheader functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service divide-by-zero error and application crash via...

MDVA-2010:185 : nfs-utils

A bug in nfs-server init script incorrectly reload rpc.idmapd after rpc.nfsd start, preventing proper communication between the two processes. As a result, all files are considered owned by nobody uid/gid on client side. This update fix this issue. Packages for 2009.0 are provided as of the...

Mandriva Update for nfs-utils MDVA-2010:185 (nfs-utils)

Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVA-2010:185 nfs-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for nfs-utils MDVA-2010:185 (nfs-utils)

Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVA-2010:185 nfs-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libsndfile MDVSA-2010:150 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2010:150 libsndfile Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

[ MDVSA-2010:148 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:148 http://www.mandriva.com/security/ Package : pidgin Date : August 12, 2010 Affected: 2008.0, 2009.0, 2010.0, 2010.1 Problem Description: A security vulnerability has been identified and fixed in pidgin: T...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:148)

A security vulnerability has been identified and fixed in pidgin : The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:147)

Security issues were identified and fixed in firefox : layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary co...

MDVA-2010:184 : net-snmp

It was discovered that the snmpd daemon could segfault with certain configuration options. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Mandriva Update for libtiff MDVSA-2010:145 (libtiff)

Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2010:145 libtiff Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:144)

This advisory updates wireshark to the latest versions, fixing several security issues : Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors CVE-2010-2284. Buffer overflow in the SigComp Universal...

Mandriva Update for gnupg2 MDVSA-2010:143 (gnupg2)

Check for the Version of gnupg2 OpenVAS Vulnerability Test Mandriva Update for gnupg2 MDVSA-2010:143 gnupg2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : gnupg2 (MDVSA-2010:143)

A vulnerability has been discovered and corrected in gnupg2 : Importing a certificate with more than 98 Subject Alternate Names via GPGSM's import command or implicitly while verifying a signature causes GPGSM to reallocate an array with the names. The bug is that the reallocation code misses...

MDVA-2010:070 : blogtk

The blogtk package in 2010.0 was crashing on start. This update fixes the problem by updating blogtk to the latest version. Additionally the python-gdata packages are being provided as well due to requirements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated pat...

MDVA-2010:039 : dbus-glib

The dbus-glib package was built without a symbol that is needed by the latest versions of tracker. This update adds the missing functions 57068. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2009:137 : rpm

This update fixes an issue with rpm: o file triggers aren't properly invoked on package removal %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2009:232 : drakx-net

This update fixes two issues in drakx-net shipped with Mandriva Linux 2010.0: - draksambashare application was fixed to correctly handle samba users bug 55388 - drakhosts application was fixed to allow specifying multiple IP addresses for same host address bug 30168 %NASLMINLEVEL 70300 @DEPRECATE...