Mandriva Linux Security Advisory : kvm (MDVSA-2009:009)

Security vulnerabilities have been discovered and corrected in VNC server of kvm version 79 and earlier, which could lead to denial-of-service attacks CVE-2008-2382, and make it easier for remote crackers to guess the VNC password CVE-2008-5714. The updated packages have been patched to prevent...

Mandriva Linux Security Advisory : gnumeric (MDVSA-2009:043)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Gnumeric working directory CVE-2009-0318. This upda...

Mandriva Linux Security Advisory : cups (MDVSA-2009:027)

A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file CVE-2009-0032. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : exiv2 (MDVSA-2008:006)

An integer overflow in the Exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : emacs (MDVSA-2008:153)

A vulnerability in emacs was found where an attacker could provide a group of files containing local variable definitions and arbitrary Lisp code to be executed when one of the provided files is opened by emacs CVE-2008-2142. The updated packages have been patched to correct this issue...

Mandriva Linux Security Advisory : wireshark (MDVSA-2009:058)

Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service application crash via a malformed NetScreen snoop file. CVE-2009-0599 Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial ...

MDVA-2009:022 : xkeyboard-config

Wrong directory permissions would prevent the compilation of keyboard mappings. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDVA-2008:179 : graphviz

The graphviz package shipped in Mandriva Linux 2008.1 has a bug in its builtin ps renderer: included images are displayed as blank area. An upstream patch fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:122)

A vulnerability was discovered in ClamAV and corrected with the 0.93.1 release : libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read. CVE-2008-2713 Other bugs have also been corrected in 0.93...

Mandriva Linux Security Advisory : mysql (MDVSA-2008:028)

The mysqlchangedb function in MySQL 5.0.x before 5.0.40 did not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allowed remote authenticated users to gain privileges CVE-2007-2692. The federated engine in MySQL 5.0.x, when performing a certain SHOW...

Mandriva Linux Security Advisory : nss_ldap (MDVSA-2008:049)

A race condition in nssldap, when used in applications that use pthread and fork after a call to nssldap, does not properly handle the LDAP connection, which might cause nssldap to return the wrong user data to the wrong process, giving one user access to data belonging to another user, in some...

Mandriva Linux Security Advisory : dbus (MDVSA-2008:054)

A vulnerability was discovered by Havoc Pennington in how the dbus-daemon applied its security policy. A user with the ability to connect to the dbus-daemon could possibly execute certain method calls that they should not normally have access to. The updated packages have been patched to correct...

Mandriva Linux Security Advisory : avahi (MDVSA-2009:031)

A vulnerability has been discovered in Avahi before 0.6.24, which allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0 CVE-2008-5081. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:178)

Alin Rad Pop found an array index vulnerability in the SDP parser of xine-lib. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker could possibly execute arbitrary code with the privileges of the user using the program CVE-2008-0073. The ASF demuxer ...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:215)

A number of vulnerabilities were discovered in Wireshark that could cause it to crash or abort while processing malicious packets CVE-2008-4680, CVE-2008-4681, CVE-2008-4682, CVE-2008-4683, CVE-2008-4684, CVE-2008-4685. This update provides Wireshark 1.0.4, which is not vulnerable to these issues...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:135)

A vulnerability was found in gnome-screensaver 2.20.0 that could possibly allow a local user to read the clipboard contents and X selection data for a locked session by using CTRL-V CVE-2007-6389. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:014)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866. The updated packages have been patched...

Mandriva Linux Security Advisory : qemu (MDVSA-2009:010)

A security vulnerability have been discovered and corrected in VNC server of qemu 0.9.1 and earlier, which could lead to a denial-of-service attack CVE-2008-2382. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2009:012)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.19 CVE-2008-5500, CVE-2008-5503, CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510, CVE-2008-5511, CVE-2008-5512. This update provides the latest Thunderbird t...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:070)

A memory management flaw was found in the GSSAPI library used by Kerberos that could result in an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5971. A flaw was discovered in how the Kerberos krb5kdc handled Kerberos v4...