4554 matches found
MDVA-2010:041 : mjpegtools
jpeg2yuv from the mjpegtools package segfaulted when linked against libjpeg v7/8 55450. The provided packages has been patched to address this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...
MDVA-2009:196 : libsndfile
The x8664 and i586 development packages had conflicting files and weren't installable in parallel. This update modifies the installation of the conflicting files. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...
MDVA-2010:173 : gnupg2
The file /etc/profile.d/gpg-agent.sh uses the source statement which is not valid in sh or ksh. The source statement for sh, ksh, and bash should be . rather than source. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...
Mandriva Linux Security Advisory : git (MDVSA-2009:155)
A vulnerability has been found and corrected in git : git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a request containing extra unrecognized arguments CVE-2009-2108. This update provides fixes for this...
Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:035)
This updates provides a new OpenOffice.org version 3.1.1. It holds security and bug fixes described as follow : An integer underflow might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow...
Mandriva Linux Security Advisory : kernel (MDVSA-2009:329)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddpN device is not found, allows remote attackers to...
Mandriva Linux Security Advisory : dhcp (MDVSA-2010:114)
A vulnerability has been found and corrected in dhcp : ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service server exit via a zero-length client ID CVE-2010-2156. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300...
Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2010:027)
Multiple vulnerabilities was discovered and corrected in kdelibs4 : KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '' NUL character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...
Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:075)
This updates provides a security update to the OpenOffice.org described as follow : OpenOffice's xmlsec uses a bundled Libtool which might load .la file in the current working directory allowing local users to gain privileges via a Trojan horse file. For enabling such vulnerability xmlsec has to...
Mandriva Linux Security Advisory : fetchmail (MDVSA-2010:037)
A vulnerability have been discovered and corrected in fetchmail : The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute...
Mandriva Linux Security Advisory : kernel (MDVSA-2010:067)
This update provides a fix to the correction of CVE-2010-0307, which resulted in crashes when running i586 applications on x8664. To update your kernel, please follow the directions located at : http://www.mandriva.com/en/security/kernelupdate %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
CVE-2010-2529
CVE-2010-2529 is an in-iputils ping.c vulnerability affecting Mandriva Linux as listed for iputils versions 20020927, 20070202, 20071127, and 20100214, enabling a remote attacker to induce a denial of service (hang) via a crafted ICMP echo response. The cited documents describe it as a network-ve...
[ MDVSA-2010:138 ] iputils
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:138 http://www.mandriva.com/security/ Package : iputils Date : July 23, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Ovidiu Mara reported a...
Mandriva Update for ghostscript MDVSA-2010:134 (ghostscript)
Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDVSA-2010:134 ghostscript Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for python MDVSA-2010:132 (python)
Check for the Version of python OpenVAS Vulnerability Test Mandriva Update for python MDVSA-2010:132 python Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...