Mandriva Linux Security Advisory : wireshark (MDVSA-2010:099)

This advisory updates wireshark to the latest versions, fixing several bugs and one security issue : The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service application crash via a malformed packet trace fil...

Mandriva Linux Security Advisory : php (MDVSA-2009:303)

Some vulnerabilities were discovered and corrected in php-5.2.11 : The tempnam function in ext/standard/file.c in PHP 5.2.11 and earlier, and 5.3.x before 5.3.1, allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, v...

Mandriva Linux Security Advisory : php (MDVSA-2010:140)

This is a maintenance and security update that upgrades php to 5.3.3 for 2010.0/2010.1. Security Enhancements and Fixes in PHP 5.3.3 : - Rewrote varexport to use smartstr rather than output buffering, prevents data disclosure if a fatal error occurs CVE-2010-2531. - Fixed a possible resource...

Mandriva Linux Security Advisory : mono (MDVSA-2009:269)

A vulnerability has been found and corrected in mono : The XML HMAC signature system did not correctly check certain lengths. If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation CVE-2009-0217. This update fixes this vulnerability...

Mandriva Linux Security Advisory : libtorrent-rasterbar (MDVSA-2009:139)

A security vulnerability has been identified and corrected in libtorrent-rasterbar : Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:239)

Multiple vulnerabilities was discovered and corrected in openssl : Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impa...

Mandriva Linux Security Advisory : file (MDVSA-2009:129)

A security vulnerability has been identified and fixed in file : Heap-based buffer overflow in the cdfreadsat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, o...

Mandriva Linux Security Advisory : php (MDVSA-2010:139)

This is a maintenance and security update that upgrades php to 5.2.14 for CS4/MES5/2008.0/2009.0/2009.1. Security Enhancements and Fixes in PHP 5.2.14 : - Rewrote varexport to use smartstr rather than output buffering, prevents data disclosure if a fatal error occurs CVE-2010-2531. - Fixed a...

Mandriva Linux Security Advisory : perl-Compress-Raw-Bzip2 (MDVSA-2009:207)

A vulnerability has been found and corrected in perl-Compress-Raw-Bzip : Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service application hang or crash via a crafted bzip2...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2010:040)

Multiple vulnerabilities has been discovered and corrected in gnome-screensaver : gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattend...

Mandriva Linux Security Advisory : php (MDVSA-2009:302)

Some vulnerabilities were discovered and corrected in php-5.3.1 : - Added maxfileuploads INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. Ilia - Added missing sanity checks around exif...

Mandriva Linux Security Advisory : cups (MDVSA-2009:280)

Two integer overflow flaws were found in the CUPS pdftops filter. An attacker could create a malicious PDF file that would cause pdftops to crash or, potentially, execute arbitrary code as the lp user if the file was printed. CVE-2009-3608, CVE-2009-3609 This update corrects the problem...

MDVA-2010:174 : mkinitrd

This new mkinitrd release fixes hotplug command and thus firmware loading inside nash, addressing failure with modules loaded inside initrd which requests firmware. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled o...

MDVA-2009:200 : mmc-agent

When accounts are created in MDS, the accounts are created with shadowExpire=0 They should be set with shadowExpire=-1, otherwise new accounts will always warn that they are expired when logging in using the account. This fixes this bug for new accounts created using MDS. It does not fix the...

MDVA-2009:254 : graphviz

This update fixes an issue with graphviz: graphviz isn't properly upgraded to a newer version when upgrading from a 2009.0 system %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:204 : kompozer

As mentioned on http://kompozer.net/, KompoZer 0.7.10 doesn't work with GTK 2.14 or higher. This is a update to version 0.8 making it work fine again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. ...

MDVA-2009:189 : qt4

Some Qt softwares like Opera have some CPU issues with Qt4 version released on mandriva 2010.0 This update fixes this issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Securit...

MDVA-2010:153 : kdelibs4

In Mandriva Linux 2010.0 some widgets, such as the Opendesktop ones, resulted in plasma crashes. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:211 : pango

A bug in pango was preventing correct location of some glyphs when scaling was in effect. This update fixes this issue and enforce version dependency on cairo, which could cause crashes when upgrading Mandriva Linux distribution to release 2010.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

MDVA-2009:128 : gnokii

Latest kaddressbook update package for 2009.1 fails to install due to unresolved gnokii library dependencies. Additionally it was discovered gnokii wasn't rebuilt after the -Werror=format-security change and a patch for this had to be added. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...