Mandriva Update for openldap MDVSA-2010:142 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2010:142 openldap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:033 : gnupg2

A packaging mistake lead to that the gpg-agent was not started by default. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

MDVA-2009:108 : libx11

Due to a interface change in version 1.2 of the xcb library, programs depending on libx11 would not be able to run without the proper version of that library. But libx11 package did not require this version explicitly allowing that this package to be installed with a wrong version of libxcb. This...

MDVA-2010:166-1 : php-eaccelerator

It was discovered php-eaccelerator-0.9.6 did not work properly with openbasedir for php-5.3.2. This advisory upgrades php-eaccelerator to 0.9.6.1 which solves this problem. Update: It was discovered php-eaccelerator-0.9.6 did not work properly with openbasedir for php-5.2.13. This advisory upgrad...

Mandriva Update for paprefs MDVA-2010:183 (paprefs)

Check for the Version of paprefs OpenVAS Vulnerability Test Mandriva Update for paprefs MDVA-2010:183 paprefs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MDVA-2010:135 : desktop-common-data

xvt script was not detecting KDE4 properly and was forking KDE4 terminal, which could break some scripts. This updates fixes this issue and also disable some unwanted sound events when using Firefox 3.6.x under GNOME. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Mandriva Linux Security Advisory : dovecot (MDVSA-2010:104)

A vulnerability was discovered and corrected in dovecot : Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service CPU consumption via long headers in an e-mail message CVE-2010-0745. This update provides dovecot 1.2.11 which is not vulnerable ...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:016)

This advisory updates wireshark to the latest 1.2.5 version, fixing several bugs and two security issues : - The 1 SMB and 2 SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service crash via a crafted packet CVE-2009-4377 - Buffer overflow in the...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:002)

A security vulnerability has been identified and fixed in pidgin : Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka...

Mandriva Linux Security Advisory : apache (MDVSA-2009:102)

A vulnerability has been found and corrected in apache : modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...

Mandriva Linux Security Advisory : freetype2 (MDVSA-2010:137)

Multiple vulnerabilities has been found and corrected in freetype2 : Multiple integer underflows/overflows and heap buffer overflows was discovered and fixed CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519. A heap buffer overflow was discovered in the bytecode support. T...

Mandriva Linux Security Advisory : mysql (MDVSA-2010:044)

A vulnerability has been found and corrected in mysql : MySQL is vulnerable to a symbolic link attack when the data home directory contains a symlink to a different filesystem which allows remote authenticated users to bypass intended access restrictions CVE-2008-7247. The updated packages have...

Mandriva Linux Security Advisory : opensc (MDVSA-2009:123)

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted CVE-2009-1603. The updated packages...

Mandriva Linux Security Advisory : nss_db (MDVSA-2010:077)

A vulnerability has been found and corrected in nssdb : The Free Software Foundation FSF Berkeley DB NSS module aka libnss-db 2.2.3pre1 reads the DBCONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or...

MDVA-2009:242 : python-qt

The python-qt package included in Mandriva 2010.0 contains a API incompatibility problem with python-sip 4.9.1, which will cause downstream problem unusable. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2009:180 : x11-driver-video-openchrome

The Openchrome driver had an issue where it could cause errors in the PCI bus after returning from DPMS, which could lead to errors in other devices. This new openchrome driver version fixes this problem, so it doesn't interfere with the other PCI devices anymore. %NASLMINLEVEL 70300 @DEPRECATED@...

MDVA-2010:017 : consolekit

A incorrect initialisation in consolekit daemon could prevent automount of removable media under GNOME or KDE environment. This package update fixes this issue it requires restarting the system to take effect. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patc...

MDVA-2010:108-1 : kde4

In mandriva 2010.0, we provided KDE 4.3.2, this update brings KDE to version 4.3.5, overall, it provides many bug fixes and enhancements. For a complete list with changes, access the official announcement at http://www.kde.org/announcements/announce-4.3.5.php In addiction we are providing new...

MDVA-2009:129 : x11-driver-video-sisimedia

Update driver to a newer version provided by the video card manufacturer. This new version fixes a system freeze issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

MDVA-2010:085 : dhcp

Dhcp-server package shipped with Mandriva Linux 2009.1 and 2010.0 was using incorrect SVLDAP definitions during the build, which resulted in ldap support being non-functional. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is...