MDVA-2010:047 : evolution

Evolution could crash when adding new task to a task list. Those packages fixes this issue and updates Evolution to the latest stable release, bringing performance and stability fixes, as well as additional translations. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

MDVA-2010:039 : dbus-glib

The dbus-glib package was built without a symbol that is needed by the latest versions of tracker. This update adds the missing functions 57068. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2009:137 : rpm

This update fixes an issue with rpm: o file triggers aren't properly invoked on package removal %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2010:031 : freeradius

Perl scripts shipped in the freeradius-web sub package use File::Temp perl module incorrectly, preventing to execute them correctly. In these perl scripts, a change was made to replace the line 'use File::Temp ;' by 'use File::Tempqwtempfile tempdir;'. %NASLMINLEVEL 70300 @DEPRECATED@ This script...

MDVA-2009:215 : fuse

Due to a bad interaction between fuse and audit framework, applications reading .gvfs would hang if audit is activated. This happens at least on first boot and every month due to readahead-collector. This was reported as bug 53208. These updated packages fix the issue. %NASLMINLEVEL 70300...

Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2009:235)

Multiple vulnerabilities was discovered and corrected in silc-toolkit : Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format...

Mandriva Linux Security Advisory : file (MDVSA-2009:129)

A security vulnerability has been identified and fixed in file : Heap-based buffer overflow in the cdfreadsat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, o...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:099)

This advisory updates wireshark to the latest versions, fixing several bugs and one security issue : The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service application crash via a malformed packet trace fil...

Mandriva Linux Security Advisory : perl-Compress-Raw-Bzip2 (MDVSA-2009:207)

A vulnerability has been found and corrected in perl-Compress-Raw-Bzip : Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service application hang or crash via a crafted bzip2...

Mandriva Linux Security Advisory : php (MDVSA-2010:139)

This is a maintenance and security update that upgrades php to 5.2.14 for CS4/MES5/2008.0/2009.0/2009.1. Security Enhancements and Fixes in PHP 5.2.14 : - Rewrote varexport to use smartstr rather than output buffering, prevents data disclosure if a fatal error occurs CVE-2010-2531. - Fixed a...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:000)

Security issues were identified and fixed in firefox 3.5.x : The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application crash via a crafted website that triggers memory consumption...

Mandriva Linux Security Advisory : php (MDVSA-2010:140)

This is a maintenance and security update that upgrades php to 5.3.3 for 2010.0/2010.1. Security Enhancements and Fixes in PHP 5.3.3 : - Rewrote varexport to use smartstr rather than output buffering, prevents data disclosure if a fatal error occurs CVE-2010-2531. - Fixed a possible resource...

Mandriva Linux Security Advisory : mono (MDVSA-2009:269)

A vulnerability has been found and corrected in mono : The XML HMAC signature system did not correctly check certain lengths. If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation CVE-2009-0217. This update fixes this vulnerability...

MDVA-2010:080 : python-qt4

python-qt4 packages released for Mandriva 2009.0 as update are in a higher version than python-qt4 released in Mandriva 2009 Spring. This breaks the kde-python part on a 2009.0 to 2009 Spring system upgrade. This fixes it by releasing updated python packages with a higher release number on Mandri...

MDVA-2009:191 : mc

This update updates Midnight Commander to latest version, which fixes occasional crashes when searching within editor/browser. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2010:035-1 : drakxtools

This update has fixes for pccard 3G modem detection and accumulated fix for handling hdX/sdX devices 53107 Update: This update remove conflicts on drakfirsttime caused by the last update of drakxtools. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

MDVA-2009:274 : digikam

In mandriva 2010.0, a beta version of digikam was provided. This update provides the final version of 1.0.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This scri...

MDVA-2009:070 : x11-driver-video-ati

When using the ati Xorg driver with two monitors attached the mouse cursor might be drawn incorrectly. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2010:144 : mdkonline

This update package contains a fix for Philco OEM systems, and does not offer to upgrade them to latest distribution versions. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2010:103 : poppler

Poppler cairo backend was not handling PDF images prescaling correctly, causing some PDF files mostly from scanned text to be unreadable. This updates fixes this issues and includes other stability fixes. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is...