Mandriva Linux Security Advisory : apache (MDVSA-2010:153)

Multiple vulnerabilities has been found and corrected in apache : The modcache and moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path CVE-2010-1452. modproxy in httpd in Apache HTTP Server...

Mandriva Update for nfs-utils MDVA-2010:185 (nfs-utils)

Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVA-2010:185 nfs-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for nfs-utils MDVA-2010:185 (nfs-utils)

Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVA-2010:185 nfs-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libsndfile MDVSA-2010:150 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2010:150 libsndfile Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

MDVA-2010:185 : nfs-utils

A bug in nfs-server init script incorrectly reload rpc.idmapd after rpc.nfsd start, preventing proper communication between the two processes. As a result, all files are considered owned by nobody uid/gid on client side. This update fix this issue. Packages for 2009.0 are provided as of the...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2010:150)

A vulnerability has been discovered and corrected in libsndfile : The 1 htkreadheader, 2 alawinit, 3 ulawinit, 4 pcminit, 5 float32init, and 6 sdsreadheader functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service divide-by-zero error and application crash via...

[ MDVSA-2010:148 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:148 http://www.mandriva.com/security/ Package : pidgin Date : August 12, 2010 Affected: 2008.0, 2009.0, 2010.0, 2010.1 Problem Description: A security vulnerability has been identified and fixed in pidgin: T...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:148)

A security vulnerability has been identified and fixed in pidgin : The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:147)

Security issues were identified and fixed in firefox : layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary co...

MDVA-2010:184 : net-snmp

It was discovered that the snmpd daemon could segfault with certain configuration options. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Mandriva Update for libtiff MDVSA-2010:145 (libtiff)

Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2010:145 libtiff Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:144)

This advisory updates wireshark to the latest versions, fixing several security issues : Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors CVE-2010-2284. Buffer overflow in the SigComp Universal...

Mandriva Update for gnupg2 MDVSA-2010:143 (gnupg2)

Check for the Version of gnupg2 OpenVAS Vulnerability Test Mandriva Update for gnupg2 MDVSA-2010:143 gnupg2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : gnupg2 (MDVSA-2010:143)

A vulnerability has been discovered and corrected in gnupg2 : Importing a certificate with more than 98 Subject Alternate Names via GPGSM's import command or implicitly while verifying a signature causes GPGSM to reallocate an array with the names. The bug is that the reallocation code misses...

MDVA-2010:085 : dhcp

Dhcp-server package shipped with Mandriva Linux 2009.1 and 2010.0 was using incorrect SVLDAP definitions during the build, which resulted in ldap support being non-functional. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is...

MDVA-2010:080 : python-qt4

python-qt4 packages released for Mandriva 2009.0 as update are in a higher version than python-qt4 released in Mandriva 2009 Spring. This breaks the kde-python part on a 2009.0 to 2009 Spring system upgrade. This fixes it by releasing updated python packages with a higher release number on Mandri...

MDVA-2009:264 : kdenetwork4

In Mandriva 2010.0, krdc was not able to connect to RDP servers as the rdesktop package was not installed, this update fixes this by adding rdesktop as runtime dependency for krdc. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDVA-2009:190 : netprofile

This update provides the missing read-netprofile command for netprofile application, which was required for on-boot network profile selection. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenabl...