Mandriva Linux Security Advisory : mplayer (MDVSA-2008:219)

A vulnerability that was discovered in xine-lib that allowed remote RTSP servers to execute arbitrary code via a large streamid SDP parameter also affects MPlayer CVE-2008-0073. Several integer overflows were discovered by Felipe Andres Manzano in MPlayer's Real video stream demuxing code. These...

Mandriva Linux Security Advisory : ruby-gnome2 (MDVSA-2008:033)

A format string vulnerability in Ruby-GNOME 2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2008:047)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.9. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

MDVA-2008:069 : initscripts

The bootsplash text messages were not correctly appearing at startup bug 38882. The /dev/fb0 device was missing in early boot and bootsplash initialization was complaining about it bug 38338. The shutdown process of network services could be troublesome, because resolvconf would be stopped too...

MDVA-2009:027 : kernel

Some problems were discovered and corrected in the Linux 2.6 kernel: Support was added for Intel 82567LM-3/82567LF-3/82567LM-4 network adapters, a bug in sunrpc causing oops when restarting nfsd was fixed, a bug in Walkman devices was workarounded, the sound drivers got some fixes, and a few more...

MDKA-2007:108 : kdetoys

The kdetoys package, as released with Mandriva Linux 2008.0, missed some binaries required by the KWeather Kicker applet, preventing KWeather to be used. This update package fixes the issue by installing the missing binaries. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as th...

MDVA-2009:048 : evolution

This update prevents unwanted dependency with gpilotd bug 46302. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

MDVA-2008:175 : urpmi

Since version 6.14.9 Urpmi would spontaneously un-ignore any updated medias. This update fixes that regression. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDVA-2008:048 : x11-driver-video

The virtual package x11-driver-video would incorrectly require sparc specific video drivers on a x86 architecture computer. The updated package fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2008:091-1 : gnome-applets

The clock applet in GNOME could crash when using some specific locations or when using updated timezone data. The Recent Documents menu was not always able to start the right application for a specific document. Update: The previous gnome-applets package on x8664 was improperly built and included...

MDVA-2008:083 : GConf2

A missing dependency could prevent gconftool symlink to be create at package install time, when installing a minimal system. This update fixes that issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2009:015 : openct

This update fixes issue with a non-LSB initscript of openct, which could cause init to switch to non LSB compat mode, and result in a loop between resolvconf and network bug 47299. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDVA-2008:071 : nfs-utils

The nfs server initscript in Mandriva Linux 2008 and 2008 Spring releases lacked support for NFS quota, preventing quota information to be available on user side. The updated packages fix this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDVA-2009:043 : module-init-tools

This stable update for module-init-tools fixes a number of problems found since the initial Mandriva Linux 2009 release, the most important ones are: - depmod may corrupt dependency files 46884 - mkinitrd crash when adding AES encryption modules 46260 - mkinitrd failure when installing recent...

MDVA-2008:180 : cracklib

The cracklib library package was incorrectly providing the development package, which was preventing the compilation of anything relying on cracklib-devel. This update fixes the incorrect Provides. It also corrects an issue when /usr is a separate partition the fails to mount at start, logging in...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:069)

Multiple memory management flaws were found in the GSSAPI library used by Kerberos that could result in the use of already freed memory or an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5901, CVE-2007-5971. A flaw was...

Mandriva Linux Security Advisory : cups (MDVSA-2008:170)

Thomas Pollet discovered an integer overflow vulnerability in the PNG image handling filter in CUPS. This could allow a malicious user to execute arbitrary code with the privileges of the user running CUPS, or cause a denial of service by sending a specially crafted PNG image to the print server...

Mandriva Linux Security Advisory : pam_mount (MDVSA-2009:004)

passwdehd script in pammount would allow local users to overwrite arbitrary files via a symlink attack on a temporary file. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandriva Linux Security Advisory : shadow-utils (MDVSA-2009:062)

A security vulnerability has been identified and fixed in login application from shadow-utils, which could allow local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line aka utline field in a utmp entry CVE-2008-5394. The updated...

Mandriva Linux Security Advisory : php (MDVSA-2009:045)

A number of vulnerabilities have been found and corrected in PHP : improve mbflfiltconvhtmldecflush error handling in ext/mbstring/libmbfl/filters/mbfilterhtmlent.c CVE-2008-5557. Additionally on Mandriva Linux 2009.0 and up the php-mbstring module is linked against a separate shared libmbfl...