MDVA-2009:274 : digikam

In mandriva 2010.0, a beta version of digikam was provided. This update provides the final version of 1.0.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This scri...

MDVA-2010:144 : mdkonline

This update package contains a fix for Philco OEM systems, and does not offer to upgrade them to latest distribution versions. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:080 : strace

A memory handling error in strace could lead to crashes when handling certain applications. This updated package fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:119 : yelp

The Yelp help browser shipped with Mandriva 2009 Spring was built without support for LZMA compression. As this is needed to view the compressed manual and GNU Info pages, LZMA support was enabled in this update. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated...

MDVA-2009:157 : kdebase4-workspace

krandrtray from KDE4 is known to have some issues. A patch was added that makes krandrtray open its configuration module when the system tray icon is clicked. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2010:143 : xine-ui

The LIRC infrared support in xine-ui program didn't work. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically...

MDVA-2009:149 : gtkmm2.4

A memory allocation bug in gtkmm would make applications using the library crash on the x8664 architecture. This update corrects the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

MDVA-2010:152 : openbox

Previous version of openbox were incorrectly started by the login windows, causing various settings such as autostart.sh to malfunction. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:000)

Security issues were identified and fixed in firefox 3.5.x : The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application crash via a crafted website that triggers memory consumption...

Mandriva Linux Security Advisory : php (MDVSA-2009:302)

Some vulnerabilities were discovered and corrected in php-5.3.1 : - Added maxfileuploads INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. Ilia - Added missing sanity checks around exif...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2010:040)

Multiple vulnerabilities has been discovered and corrected in gnome-screensaver : gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattend...

Mandriva Linux Security Advisory : cups (MDVSA-2009:280)

Two integer overflow flaws were found in the CUPS pdftops filter. An attacker could create a malicious PDF file that would cause pdftops to crash or, potentially, execute arbitrary code as the lp user if the file was printed. CVE-2009-3608, CVE-2009-3609 This update corrects the problem...

MDVA-2010:162 : openssh

The latest update to openssh application caused it to display bogus FAILED status when shutting down or restarting, when no clients are connected to the ssh server. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDVA-2009:113 : rpm

This update fixes a minor issue with rpm: - mdvsys mass-update can segfault when parsing the %applypatches macros through librpm bug 50579 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

MDVA-2010:133 : gdm

gdm was not configuring properly dpi value to use for its graphical greeter, which could lead to unreadable text on HD resolution with some graphical chipset. This package update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDVA-2010:080 : python-qt4

python-qt4 packages released for Mandriva 2009.0 as update are in a higher version than python-qt4 released in Mandriva 2009 Spring. This breaks the kde-python part on a 2009.0 to 2009 Spring system upgrade. This fixes it by releasing updated python packages with a higher release number on Mandri...

MDVA-2009:191 : mc

This update updates Midnight Commander to latest version, which fixes occasional crashes when searching within editor/browser. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:114 : logcheck

The logcheck package shipped in mandriva 2009.1 had two issues, preventing it to run properly: - its configuration directory /etc/logcheck is not readable with the identity used for running logcheck - it uses run-parts utility with unsupported --list option %NASLMINLEVEL 70300 @DEPRECATED@ This...

Mandriva Linux Security Advisory : mysql (MDVSA-2010:093)

A vulnerability was discovered in mysql which would permit mysql users without any kind of privileges to use the UNINSTALL PLUGIN function CVE-2010-1621. A problem was discovered in the mysqld init script which under certain circumstances could cause the service to exit too quickly, giving the OK...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2010:136)

Multiple vulnerabilities has been found and corrected in ghostscript : Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document containing a long name CVE-2009-4897...