Mandriva Linux Security Advisory : git (MDVSA-2009:155)

A vulnerability has been found and corrected in git : git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a request containing extra unrecognized arguments CVE-2009-2108. This update provides fixes for this...

Mandriva Linux Security Advisory : libtorrent-rasterbar (MDVSA-2009:139)

A security vulnerability has been identified and corrected in libtorrent-rasterbar : Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or...

Mandriva Linux Security Advisory : mono (MDVSA-2009:269)

A vulnerability has been found and corrected in mono : The XML HMAC signature system did not correctly check certain lengths. If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation CVE-2009-0217. This update fixes this vulnerability...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:239)

Multiple vulnerabilities was discovered and corrected in openssl : Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impa...

MDVA-2009:244 : kdelibs4

In kde 4.3 provided with mandriva 2O1O.0 there was a performance regression and lag in krunner. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security...

MDVA-2009:128 : gnokii

Latest kaddressbook update package for 2009.1 fails to install due to unresolved gnokii library dependencies. Additionally it was discovered gnokii wasn't rebuilt after the -Werror=format-security change and a patch for this had to be added. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...

MDVA-2010:103 : poppler

Poppler cairo backend was not handling PDF images prescaling correctly, causing some PDF files mostly from scanned text to be unreadable. This updates fixes this issues and includes other stability fixes. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is...

MDVA-2010:132 : plymouth

Plymouth verbose mode at shutdown was not displaying logs properly. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2010:168 : espeak

Espeak as shipped with Mandriva 2010.0 had no support for pulseaudio. An updated package was provided that added pulseaudio support, but didn't work anymore for systems that had pulseaudio disabled. This update makes espeak work in both scenarios. Additional packages has been added to this adviso...

MDVA-2010:147 : x11-server

x11-server contains a memory leak that is triggered when cursors are changed, which might lead to high memory consumption over a long period of time. This update fixes the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDVA-2010:003 : phonon

In mandriva 2010.0, when listening to a web stream while you lose your internet connection can make Amarok to crash. This update fixes this bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2009:222 : eclipse

A missing xulrunner path in the eclipse.ini configuration file is preventing the Eclipse to start resulting in a crash. This update provides the fix for that bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2010:048 : gtk

gtk+ 2.0 was not handling correctly input method in client-side window mode. This could lead to applications crash, inkscape is a good example of crash. This updates fixes this issues and upgrades gtk+2.0 to latest stable release 2.18.6, which includes stability fixes for various applications,...

MDVA-2009:123 : kde4

Mandriva Linux 2009 Spring was released with KDE4 version 4.2.2. This update upgrades KDE4 in Mandriva Linux 2009 Spring to version 4.2.4, which brings many bugfixes and overall improvements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

MDVA-2009:236 : kdemultimedia4

In Mandriva Linux 2010.0, the kmix application may fail to initialize on system start. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

MDVA-2009:255 : fontconfig

A bug in fontconfig language cache was generating invalid cache which would cause crashes or freeze when upgrading previous Mandriva Linux release to Mandriva Linux 2010 using live update feature. This updates fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2010:136)

Multiple vulnerabilities has been found and corrected in ghostscript : Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document containing a long name CVE-2009-4897...

Mandriva Linux Security Advisory : mysql (MDVSA-2010:093)

A vulnerability was discovered in mysql which would permit mysql users without any kind of privileges to use the UNINSTALL PLUGIN function CVE-2010-1621. A problem was discovered in the mysqld init script which under certain circumstances could cause the service to exit too quickly, giving the OK...

Mandriva Linux Security Advisory : opensc (MDVSA-2009:123)

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted CVE-2009-1603. The updated packages...

Mandriva Linux Security Advisory : dovecot (MDVSA-2009:306)

A vulnerability was discovered and corrected in dovecot : Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the...