Mandriva Linux Security Advisory : libtiff (MDVSA-2012:054)

A vulnerability has been found and corrected in libtiff : An integer overflow was discovered in the libtiff/tiffgetimage.c file in the tiff library which could cause execution of arbitrary code using a specially crafted TIFF image file CVE-2012-1173. The updated packages have been patched to...

Mandriva Linux Security Advisory : libvorbis (MDVSA-2012:052)

A vulnerability has been found and corrected in libvorbis : If a specially crafted Ogg Vorbis media file was opened by an application using libvorbis, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application CVE-2012-0444...

[ MDVSA-2012:042 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:042 http://www.mandriva.com/security/ Package : wireshark Date : March 28, 2012 Affected: 2011. Problem Description: Multiple vulnerabilities was found and corrected in Wireshark: The ANSI A dissector could...

Mandriva Linux Security Advisory : libpng (MDVSA-2012:046)

A potential memory corruption has been found and corrected in libpng CVE-2011-3048. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security...

Mandriva Linux Security Advisory : gnutls (MDVSA-2012:045)

A vulnerability has been found and corrected in GnuTLS : Buffer overflow in the gnutlssessiongetdata function in lib/gnutlssession.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denia...

[ MDVSA-2012:038 ] openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:038 http://www.mandriva.com/security/ Package : openssl Date : March 26, 2012 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected in...

[ MDVSA-2012:041 ] expat

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:041 http://www.mandriva.com/security/ Package : expat Date : March 27, 2012 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A memory leak and a hash table collision flaw in expat could...

Mandriva Linux Security Advisory : nginx (MDVSA-2012:043)

A vulnerability has been found and corrected in nginx : Specially crafted backend response could result in sensitive information leak CVE-2012-1180. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandriva Linux Security Advisory : gnutls (MDVSA-2012:040)

A vulnerability has been found and corrected in GnuTLS : gnutlscipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service heap memory corruption and application crash...

Mandriva Linux Security Advisory : expat (MDVSA-2012:041)

A memory leak and a hash table collision flaw in expat could cause denial os service DoS attacks CVE-2012-0876, CVE-2012-1148. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Mandriva Linux Security Advisory : libtasn1 (MDVSA-2012:039)

A vulnerability has been found and corrected in libtasn1 : The asn1getlengthder function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service...

Mandriva Linux Security Advisory : openssl (MDVSA-2012:038)

Multiple vulnerabilities has been found and corrected in openssl : The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt...

Mandriva Linux Security Advisory : file (MDVSA-2012:035)

Multiple out-of heap-based buffer read flaws and invalid pointer dereference flaws were found in the way file, utility for determining of file types processed header section for certain Composite Document Format CDF files. A remote attacker could provide a specially crafted CDF file, which once...

Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2012:037)

A vulnerability has been found and corrected in cyrus-imapd : The indexgetids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted...

[ MDVSA-2012:034 ] libzip

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:034 http://www.mandriva.com/security/ Package : libzip Date : March 23, 2012 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected in libzi...

MDVA-2012:031 : mysql

This is a maintenance and bugfix release that upgrades mysql to the latest respective version which resolves various upstream bugs. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

Mandriva Linux Security Advisory : libzip (MDVSA-2012:034)

Multiple vulnerabilities has been found and corrected in libzip : libzip version = 0.10 uses an incorrect loop construct, which can result in a heap overflow on corrupted zip files CVE-2012-1162. libzip version = 0.10 has a numeric overflow condition, which, for example, results in improper...

Mandriva Linux Security Advisory : libpng (MDVSA-2012:033)

A vulnerability has been found and corrected in libpng : A heap-based buffer overflow flaw was found in the way libpng processed compressed chunks in PNG image files. An attacker could create a specially crafted PNG image file that, when opened, could cause an application using libpng to crash or...

[ MDVSA-2012:030 ] systemd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:030 http://www.mandriva.com/security/ Package : systemd Date : March 16, 2012 Affected: 2011. Problem Description: A vulnerability has been found and corrected in systemd: A TOCTOU race condition was found i...

[ MDVSA-2012:029 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:029 http://www.mandriva.com/security/ Package : pidgin Date : March 16, 2012 Affected: 2011., Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in pidgin:...