Mandriva Linux Security Advisory : acpid (MDVSA-2009:107-1)

The daemon in acpid before 1.0.10 allows remote attackers to cause a denial of service CPU consumption and connectivity loss by opening a large number of UNIX sockets without closing them, which triggers an infinite loop CVE-2009-0798. The updated packages have been patched to prevent this. Updat...

MDVA-2009:104 : fuse

FUSE default setup was requiring non privileged users to be added manually to fuse group to be able to use fuse feature and this feature was not available immediatly after fuse package installation. This package updates ensure fuse is now immediatly available after package installation and for al...

Mandriva Linux Security Advisory : libwmf (MDVSA-2009:106-1)

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file CVE-2009-1364. The updated packages have been patched to prevent this. Update :...

MDVA-2009:058 : SDL12

The SDL12 package shipped in 2008.1 and 2009.0 have a bug which will cause segment fault error on some games such as ri-li. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Linux Security Advisory : memcached (MDVSA-2009:105)

The processstat function in Memcached prior 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port CVE-2009-1255, CVE-2009-1494. The updated...

Mandriva Linux Security Advisory : udev (MDVSA-2009:103-1)

Security vulnerabilities have been identified and fixed in udev. udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space CVE-2009-1185. Buffer overflow in the utilpathencode...

Mandriva Linux Security Advisory : xpdf (MDVSA-2009:101)

Multiple buffer overflows in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0146. Multiple integer overflows in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0147. An integ...

Mandrake Security Advisory MDVSA-2009:095 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:095. OpenVAS Vulnerability Test $Id: mdksa2009095.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:095 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009...

MDVA-2009:054 : iproute2

iproute2 package shipped with Mandriva Linux 2009.0 installed outdated manual pages. This update installs correct manual pages instead. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Mandriva Linux Security Advisory : clamav (MDVSA-2009:097)

Multiple vulnerabilities has been found and corrected in clamav : Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive CVE-2009-1241. libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of...

MDVA-2009:055 : webmin

Webmin shipped with Mandriva Linux 2009.0 used crypt method for password creation, which prevented usage of passwords longer than 8 character. This update configures webmin to create MD5 passwords for new users by default. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:095)

A buffer underflow in Ghostscript's CCITTFax decoding filter allows remote attackers to cause denial of service and possibly to execute arbitrary by using a crafted PDF file CVE-2007-6725. Buffer overflow in Ghostscript's BaseFont writer module allows remote attackers to cause a denial of service...

MDVA-2008:106-1 : openoffice.org-voikko

openoffice.org-voikko provides Finnish spellchecker and hyphenator component for OpenOffice.org. The package is being updated for the new OpenOffice.org version. Update: Due to a build error, the previous update for i586 architecture was built against the old OpenOffice.org. This update fixes tha...

MDVA-2008:090 : nautilus

A regression was introduced in the Mandriva Linux GNOME package while fixing CD-ROM drives ejecting when using the hardware button when the CD-ROM drive was present in the system fstab. This regression caused an error popup to appear when using the eject hardware button on CD-ROM drives not prese...

MDVA-2008:099 : swi-prolog

The package included with Mandriva Linux 2008 Spring for swi-prolog could not be installed due to an incorrect dependency. This updated package removes the incorrect dependency and can be installed as normal. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch...

MDVA-2008:064 : draksnapshot

This update fixes a few issues in draksnapshot. It prevents the applet from crashing if DBUS is not accessible bug 40031. The applet will also now ignore the root disc, if it's USB. The configurator will now prevent to recursively backup the backup directory bug 39801. Last but not least, it will...

MDVA-2008:164 : rpm

This update provides Lzma payload support to rpm, which allows for updating to Mandriva Linux 2009 from Mandriva Linux 2008, or allows for creating 2009-based chroots on a 2008-based host. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2008:055 : xkeyboard-config

Mandriva Linux 2008.1 introduced an improved Finnish default keyboard layout called Kotoistus. This layout adds altgr-space as a key combination for non-breaking space. However, that key combination can be easily hit accidentally when a normal space was intended instead, especially after typing t...

MDVA-2008:115 : drakxtools

This drakxtools update contains file leaks and automatic disk discovery fixes. The network driver detection used to leak file descriptors, meaning that network applications like the wireless tool or the network center stopped working after extended use. The automatic disk discovery tool did not...

MDVA-2008:067 : ksplash-engine-moodin

ksplash-engine-moodin has some background caching routines for simulating the transparency and the fade-in effect of the loading steps. When the session loading happens too fast, the first steps don't have enough time to finish the caching before the later steps start to happen, showing some imag...