Mandriva Linux Security Advisory : freetype2 (MDVSA-2010:201)

A vulnerability was discovered and corrected in freetype2 : Marc Schoenefeld found an input stream position error in the way FreeType font rendering engine processed input file streams. If a user loaded a specially crafted font file with an application linked against FreeType and relevant font...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:200)

It was discovered that the ASN.1 BER dissector in wireshark was susceptible to a stack overflow CVE-2010-3445. For 2010.0 and 2010.1 wireshark was upgraded to v1.2.12 which is not vulnerable to this issue and was patched for CS4 and MES5 to resolve the vulnerability. %NASLMINLEVEL 70300 C Tenable...

MDVA-2010:160-1 : heartbeat

The heartbeat package in the 2010.0 release had wrong permissions and ownership for /usr/bin/clstatus this prevented it from working correctly. Also when peers were outdated heartbeat didn't failover gracefully. This update fixes both these issues. Update: Packages for 2009.0 and MES5 were missin...

MDVA-2010:210 : mysql

fix weird comma in init script output - Typo in init script %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

MDVA-2010:208 : cyrus-imapd

A problem has been discovered with cyrus-imapd 2.3.15 on Mandriva 2010 Spring, in handling the IMAP COMPRESS option. Cyrus imapd 2.3.15 implements the IMAP COMPRESS option, in order to compress data between the imap server and clients that support this option, eg. Thunderbird 3. A problem has bee...

MDVA-2010:207 : urpmi

Fix bad return code of urpmi.addmedia --distrib if it fails. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva Lin...

Mandriva Linux Security Advisory : kernel (MDVSA-2010:198)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount symlinks, which allows attackers to have an unknown impact, related to LOOKUPFOLLOW. CVE-2010-1088 The tcfilltclass function in...

[ MDVSA-2010:195 ] libesmtp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:195 http://www.mandriva.com/security/ Package : libesmtp Date : October 4, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple...

Mandriva Linux Security Advisory : postgresql (MDVSA-2010:197)

Multiple vulnerabilities was discovered and corrected in postgresql : An authenticated database user can manipulate modules and tied variables in some external procedural languages to execute code with enhanced privileges CVE-2010-3433. Packages for 2008.0 and 2009.0 are provided as of the Extend...

MDVA-2010:204 : gnupg2

The gpg-agent has a problem making it stop to work after 1 minute or even not start at all. This update has fixes for this problems. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

Mandriva Linux Security Advisory : git (MDVSA-2010:194)

A vulnerability has been found and corrected in git : Stack-based buffer overflow in the isgitdirectory function in setup.c in Git before 1.7.2.1 allows local users to gain privileges via a long gitdir: field in a .git file in a working copy CVE-2010-2542. The updated packages have been patched t...

MDVA-2010:202 : mdkonline

This update: - fixes bug related to loading png files after upgrading GTK 59025 in distro upgrade; - Adds the mdkapplet restart feature to mdkapplet-upgrade-helper, triggered after a successful upgrade 59481. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch...

MDVA-2010:201 : evolution

Evolution would sometimes crash when you view and close messages quickly, while the preview panel is disabled. This updates Evolution to the latest version that prevents this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2010:205 : xdg-user-dirs

The translations for the default download directory was missing for several languages. This update adds the missing translations. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

Mandriva Linux Security Advisory : mailman (MDVSA-2010:191)

Multiple vulnerabilities has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description...

Mandriva Linux Security Advisory : libtiff (MDVSA-2010:190)

A vulnerability has been found and corrected in libtiff : libtiff allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TIFF image CVE-2010-3087. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...

Mandriva Linux Security Advisory : dovecot (MDVSA-2010:196)

A vulnerability was discovered and corrected in dovecot : Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary...

Mandriva Linux Security Advisory : apr-util (MDVSA-2010:192)

A denial of service attack against aprbrigadesplitline was discovered in apr-util CVE-2010-1623. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=4 90 The update...

Mandriva Linux Security Advisory : qt-creator (MDVSA-2010:193)

A vulnerability has been found in Qt Creator 2.0.0 and previous versions. The vulnerability occurs because of an insecure manipulation of a Unix environment variable by the qtcreator shell script. It manifests by causing Qt or Qt Creator to attempt to load certain library names from the current...

Mandriva Update for mdkonline MDVA-2010:202 (mdkonline)

Check for the Version of mdkonline OpenVAS Vulnerability Test Mandriva Update for mdkonline MDVA-2010:202 mdkonline Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...