Mandriva Linux Security Advisory : apache (MDVSA-2010:153)

Multiple vulnerabilities has been found and corrected in apache : The modcache and moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path CVE-2010-1452. modproxy in httpd in Apache HTTP Server...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2010:150)

A vulnerability has been discovered and corrected in libsndfile : The 1 htkreadheader, 2 alawinit, 3 ulawinit, 4 pcminit, 5 float32init, and 6 sdsreadheader functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service divide-by-zero error and application crash via...

MDVA-2010:185 : nfs-utils

A bug in nfs-server init script incorrectly reload rpc.idmapd after rpc.nfsd start, preventing proper communication between the two processes. As a result, all files are considered owned by nobody uid/gid on client side. This update fix this issue. Packages for 2009.0 are provided as of the...

Mandriva Update for nfs-utils MDVA-2010:185 (nfs-utils)

Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVA-2010:185 nfs-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libsndfile MDVSA-2010:150 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2010:150 libsndfile Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for nfs-utils MDVA-2010:185 (nfs-utils)

Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVA-2010:185 nfs-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[ MDVSA-2010:148 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:148 http://www.mandriva.com/security/ Package : pidgin Date : August 12, 2010 Affected: 2008.0, 2009.0, 2010.0, 2010.1 Problem Description: A security vulnerability has been identified and fixed in pidgin: T...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:148)

A security vulnerability has been identified and fixed in pidgin : The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:147)

Security issues were identified and fixed in firefox : layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary co...

MDVA-2010:184 : net-snmp

It was discovered that the snmpd daemon could segfault with certain configuration options. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Mandriva Update for libtiff MDVSA-2010:145 (libtiff)

Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2010:145 libtiff Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:144)

This advisory updates wireshark to the latest versions, fixing several security issues : Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors CVE-2010-2284. Buffer overflow in the SigComp Universal...

Mandriva Update for gnupg2 MDVSA-2010:143 (gnupg2)

Check for the Version of gnupg2 OpenVAS Vulnerability Test Mandriva Update for gnupg2 MDVSA-2010:143 gnupg2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : gnupg2 (MDVSA-2010:143)

A vulnerability has been discovered and corrected in gnupg2 : Importing a certificate with more than 98 Subject Alternate Names via GPGSM's import command or implicitly while verifying a signature causes GPGSM to reallocate an array with the names. The bug is that the reallocation code misses...

MDVA-2010:145 : lirc

It was not possible to load the lircatiusb and lircbt829 LIRC infrared drivers due to an Unknown symbol error. The updated packages fix this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2009:119 : yelp

The Yelp help browser shipped with Mandriva 2009 Spring was built without support for LZMA compression. As this is needed to view the compressed manual and GNU Info pages, LZMA support was enabled in this update. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated...

MDVA-2009:149 : gtkmm2.4

A memory allocation bug in gtkmm would make applications using the library crash on the x8664 architecture. This update corrects the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

MDVA-2009:157 : kdebase4-workspace

krandrtray from KDE4 is known to have some issues. A patch was added that makes krandrtray open its configuration module when the system tray icon is clicked. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...