MDVA-2010:225 : commoncpp

This updates fixes two major bugs: - applog subcription/unsubscription needed to get a thread safe usage of applog were buggy and not thread safe themselves. - disabling slog usage form printout level error was not respected. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

MDVA-2010:224 : snort

Thus is a bug and maintenance release of snort that fixes numerous of issues such as: Fix installer packages to include correct version of sensitive data preprocessor for linux and Windows Eliminate false positives when using fastpattern:only and having only one http content in the pattern matche...

Mandriva Linux Security Advisory : poppler (MDVSA-2010:231)

Multiple vulnerabilities were discovered and corrected in poppler : The Gfx::getPos function in the PDF parser in poppler, allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer dereference CVE-2010-3702. The...

Mandriva Linux Security Advisory : poppler (MDVSA-2010:230)

Multiple vulnerabilities were discovered and corrected in poppler : The Gfx::getPos function in the PDF parser in poppler, allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer dereference CVE-2010-3702. The FoFiType1::pars...

MDVA-2010:222 : tomboy

Users who have migrated from gnote to tomboy and use online note syncing could lose their notes. This update fixes the note parsing to prevent data loss. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/0...

Mandriva Linux Security Advisory : dhcp (MDVSA-2010:226)

A vulnerability was discovered and corrected in ISC dhcp : ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service crash via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward...

[ MDVSA-2010:226 ] dhcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:226 http://www.mandriva.com/security/ Package : dhcp Date : November 10, 2010 Affected: 2009.1, 2010.0, 2010.1 Problem Description: A vulnerability was discovered and corrected in ISC dhcp: ISC DHCP server 4...

[ MDVSA-2010:224 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:224 http://www.mandriva.com/security/ Package : php Date : November 9, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered...

[ MDVSA-2010:225-1 ] libmbfl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:225-1 http://www.mandriva.com/security/ Package : libmbfl Date : November 10, 2010 Affected: 2010.0, 2010.1 Problem Description: A vulnerability was discovered and corrected in libmbfl php: Fix bug 53273...

Mandriva Linux Security Advisory : libmbfl (MDVSA-2010:225-1)

A vulnerability was discovered and corrected in libmbfl php : - Fix bug 53273 mbstrcut returns garbage with the excessive length parameter CVE-2010-4156. The updated packages have been patched to correct these issues. Update : The MDVSA-2010:225 advisory used the wrong patch to address the proble...

Mandriva Linux Security Advisory : mysql (MDVSA-2010:223)

Multiple vulnerabilities were discovered and corrected in mysql : - During evaluation of arguments to extreme-value functions such as LEAST and GREATEST, type errors did not propagate properly, causing the server to crash CVE-2010-3833. - The server could crash after materializing a derived table...

Mandriva Linux Security Advisory : php (MDVSA-2010:224)

A vulnerability was discovered and corrected in php : A flaw in ext/xml/xml.c could cause a cross-site scripting XSS vulnerability CVE-2010-3870. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...

MDVA-2010:219 : kdeplasma-addons

It was discovered the kdeplasma-addons packages were not rebuilt relinked against the libkdcraw.so.8 and libkexiv2.so.8 libraries provided by kdegraphics4-4.3.5-0.7mdv2010.0. This advisory addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated...

MDVA-2010:220 : kipi-plugins

It was discovered the kipi-plugins packages were not rebuilt relinked against the libkdcraw.so.8 and libkexiv2.so.8 libraries provided by kdegraphics4-4.3.5-0.7mdv2010.0. This advisory addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch...

Mandriva Update for libgpod MDVA-2010:215 (libgpod)

Check for the Version of libgpod OpenVAS Vulnerability Test Mandriva Update for libgpod MDVA-2010:215 libgpod Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for perl-URPM MDVA-2010:214 (perl-URPM)

Check for the Version of perl-URPM OpenVAS Vulnerability Test Mandriva Update for perl-URPM MDVA-2010:214 perl-URPM Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for gkrellm MDVA-2010:216 (gkrellm)

Check for the Version of gkrellm OpenVAS Vulnerability Test Mandriva Update for gkrellm MDVA-2010:216 gkrellm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Linux Security Advisory : pam (MDVSA-2010:220)

Multiple vulnerabilities were discovered and corrected in pam : The pamxauth module did not verify the return values of the setuid and setgid system calls. A local, unprivileged user could use this flaw to execute the xauth command with root privileges and make it read an arbitrary input file...

Mandriva Update for perl-URPM MDVA-2010:214 (perl-URPM)

Check for the Version of perl-URPM OpenVAS Vulnerability Test Mandriva Update for perl-URPM MDVA-2010:214 perl-URPM Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for mailman MDVA-2010:212 (mailman)

Check for the Version of mailman OpenVAS Vulnerability Test Mandriva Update for mailman MDVA-2010:212 mailman Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...