Mandriva Linux Security Advisory : dia (MDVSA-2009:040)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current dia working directory CVE-2008-5984. This update...

Mandriva Linux Security Advisory : mailman (MDVSA-2008:061)

Multiple cross-site scripting XSS vulnerabilities were found in Mailman prior to version 2.1.10b1, which allow remote attackers to inject arbitrary web script or HTML via edting templates and the list's info attribute in the web administrator interface. The updated packages have been patched to...

Mandriva Linux Security Advisory : SDL_image (MDVSA-2008:040)

The LWZReadByte and IMGLoadLBMRW functions in SDLimage contain a boundary error that could be triggered to cause a static buffer overflow and a heap-based buffer overflow. If a user using an application linked against the SDLimage library were to open a carefully crafted GIF or IFF ILBM file, the...

Mandriva Linux Security Advisory : python-django (MDVSA-2008:185)

A cross-site request forgery vulnerability was discovered in Django that, if exploited, could be used to perform unrequested deletion or modification of data. Updated versions of Django will now discard posts from users whose sessions have expired, so data will need to be re-entered in these case...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:015)

Several vulnerabilities have been discovered in ffmpeg, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESIZE value CVE-2008-4867. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:003)

An integer overflow vulnerability was reported by iDefense with clamav when parsing Portable Executable PE files packed in he MEW format. This could be exploited to cause a heap-based buffer overflow CVE-2007-6335. Toeroek Edwin reported an off-by-one error when decompressing MS-ZIP compressed CA...

[ MDVSA-2009:092 ] ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:092 http://www.mandriva.com/security/ Package : ntp Date : April 13, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: A vulnerability has been foun...

[ MDVSA-2009:091 ] mod_perl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:091 http://www.mandriva.com/security/ Package : modperl Date : April 12, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability has been found and corrected in modpe...

[ MDVSA-2009:089 ] opensc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:089 http://www.mandriva.com/security/ Package : opensc Date : April 9, 2009 Affected: 2008.0, 2008.1, 2009.0, Corporate 4.0 Problem Description: OpenSC before 0.11.7 allows physically proximate attackers to...

Mandriva Update for kernel MDKSA-2007:002 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:002 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for gimp MDKSA-2007:108 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKSA-2007:108 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for gd MDKSA-2007:153 (gd)

Check for the Version of gd OpenVAS Vulnerability Test Mandriva Update for gd MDKSA-2007:153 gd Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Mandriva Update for openssl MDKSA-2007:237 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDKSA-2007:237 openssl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for kernel MDVSA-2008:104 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:104 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for stunnel MDVSA-2008:168 (stunnel)

Check for the Version of stunnel OpenVAS Vulnerability Test Mandriva Update for stunnel MDVSA-2008:168 stunnel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for pidgin MDVA-2008:103 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVA-2008:103 pidgin Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for x11-driver-video-intel MDVA-2008:143 (x11-driver-video-intel)

Check for the Version of x11-driver-video-intel OpenVAS Vulnerability Test Mandriva Update for x11-driver-video-intel MDVA-2008:143 x11-driver-video-intel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Mandriva Update for clamav MDVSA-2008:003 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:003 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for krb5 MDVSA-2008:070 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:070 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for kernel MDKSA-2007:195 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:195 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...