Mandriva Linux Security Advisory : libcdaudio (MDVSA-2008:233-1)

A heap overflow was found in the CDDB retrieval code of libcdaudio, which could result in the execution of arbitrary code CVE-2008-5030. In addition, the fixes for CVE-2005-0706 were not applied to newer libcdaudio packages as shipped with Mandriva Linux, so the patch to fix that issue has been...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:044)

The waittaskstopped function in the Linux kernel before 2.6.23.8 checks a TASKTRACED bit instead of an exitstate value, which allows local users to cause a denial of service machine crash via unspecified vectors. NOTE: some of these details are obtained from third-party information. CVE-2007-5500...

Mandriva Linux Security Advisory : pam (MDVSA-2009:077)

A security vulnerability has been identified and fixed in pam : Integer signedness error in the pamStrTok function in libpam/pammisc.c in Linux-PAM aka pam 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and mig...

Mandriva Linux Security Advisory : gstreamer0.10-plugins-good (MDVSA-2009:035)

Security vulnerabilities have been discovered and corrected in gstreamer0.10-plugins-good, might allow remote attackers to execute arbitrary code via a malformed QuickTime media file CVE-2009-0386, CVE-2009-0387, CVE-2009-0397. The updated packages have been patched to prevent this. %NASLMINLEVEL...

Mandriva Linux Security Advisory : gd (MDVSA-2008:038)

Buffer overflow in the LWZReadByte function in gdgifin.c in GD prior to 2.0.34 allows remote attackers to have an unknown impact via a GIF file with inputcodesize greater than MAXLWZBITS, which triggers an overflow when initializing the table array. This was originally fixed in PHP's embedded GD...

Mandriva Linux Security Advisory : gnutls (MDVSA-2008:227-1)

Martin von Gagern found a flow in how GnuTLS versions 1.2.4 up until 2.6.1 verified certificate chains provided by a server. A malicious server could use this flaw to spoof its identity by tricking client applications that used the GnuTLS library to trust invalid certificates CVE-2008-4989. Updat...

Mandriva Linux Security Advisory : bind (MDVSA-2009:002)

A flaw was found in how BIND checked the return value of the OpenSSL DSAdoverify function. On systems that use DNSSEC, a malicious zone could present a malformed DSA certificate and bypass proper certificate validation, which would allow for spoofing attacks CVE-2009-0025. The updated packages ha...

Mandriva Linux Security Advisory : openafs (MDVSA-2008:207)

A race condition in OpenAFS 1.3.40 through 1.4.5 allowed remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks CVE-2007-6599. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Securit...

Mandriva Linux Security Advisory : wml (MDVSA-2008:076)

Two vulnerabilities were found in the Website META Language WML package that allowed local users to overwrite arbitrary files via symlink attacks. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:124)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Linux Security Advisory : nfs-utils (MDVSA-2009:060)

A security vulnerability has been identified and fixed in nfs-utils, which caused TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions CVE-2008-4552. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2008:123)

Stefan Cornelius discovered two buffer overflows in Imlib's image loaders for PNM and XPM images, which could possibly result in the execution of arbitrary code CVE-2008-2426. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : php (MDVSA-2008:128)

A number of vulnerabilities have been found and corrected in PHP : php-cgi in PHP prior to 5.2.6 does not properly calculate the length of PATHTRANSLATED, which has unknown impact and attack vectors CVE-2008-0599. The escapeshellcmd API function in PHP prior to 5.2.6 has unknown impact and...

Mandriva Linux Security Advisory : gstreamer0.10-plugins-base (MDVSA-2009:085)

Integer overflows in gstreamer0.10-plugins-base Base64 encoding and decoding functions related with glib2.0 issue CVE-2008-4316 may lead attackers to cause denial of service. Altough vector attacks are not known yet CVE-2009-0586. This update provide the fix for that security issue. %NASLMINLEVEL...

Mandriva Linux Security Advisory : avahi (MDVSA-2009:076)

A security vulnerability has been identified and fixed in avahi which could allow remote attackers to cause a denial of service network bandwidth and CPU consumption via a crafted legacy unicast mDNS query packet CVE-2009-0758. The updated packages have been patched to prevent this. %NASLMINLEVEL...

Mandriva Linux Security Advisory : libxslt (MDVSA-2008:160)

Chris Evans of the Google Security Team found a vulnerability in the RC4 processing code in libxslt that did not properly handle corrupted key information. A remote attacker able to make an application linked against libxslt process malicious XML input could cause the application to crash or...

Mandriva Linux Security Advisory : metisse (MDVSA-2008:179)

An input validation flaw was found in X.org's MIT-SHM extension. A client connected to the X.org server could read arbitrary server memory, resulting in the disclosure of sensitive data of other users of the X.org server CVE-2008-1379. Multiple integer overflows were found in X.org's Render...

Mandriva Linux Security Advisory : xchat (MDVSA-2009:059-1)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current X-Chat working directory CVE-2009-0315. This update...

Mandriva Linux Security Advisory : cairo (MDVSA-2008:019)

Peter Valchev discovered that Cairo did not correctly decode PNG image data. By tricking a user or automated system into processing a specially crafted PNG with Cairo, a remote attacker could execute arbitrary code with the privileges of the user opening the file. The updated packages have been...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:110)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.14. This update provides the latest Firefox to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...