Mandriva Linux Security Advisory : amarok (MDVSA-2009:030-1)

Data length values in metadata Audible Audio media file .aa can lead to an integer overflow enabling remote attackers use it to trigger an heap overflow and enabling the possibility to execute arbitrary code CVE-2009-0135. Failure on checking heap allocation on Audible Audio media files .aa allow...

Mandriva Linux Security Advisory : x11-server-xgl (MDVSA-2008:025)

An input validation flaw was found in the X.org server's XFree86-Misc extension that could allow a malicious authorized client to cause a denial of service crash, or potentially execute arbitrary code with root privileges on the X.org server CVE-2007-5760. A flaw was found in the X.org server's...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:001-1)

A number of vulnerabilities in the Wireshark program were found that could cause crashes, excessive looping, or arbitrary code execution. This update provides Wireshark 0.99.7 which is not vulnerable to these issues. An updated version of libsmi is also being provided, not because of security...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2009:074)

A security vulnerability has been identified and fixed in neon : neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service NULL pointer dereference and crash via vectors related to Digest authentication and Digest domain parameter support CVE-2008-3746. The updated packages ha...

Mandriva Linux Security Advisory : blender (MDVSA-2008:204)

Stefan Cornelius of Secunia Research reported a boundary error when Blender processed RGBE images which could be used to execute arbitrary code with the privileges of the user running Blender if a specially crafted .hdr or .blend file were openedCVE-2008-1102. As well, multiple vulnerabilities...

Mandriva Linux Security Advisory : icu (MDVSA-2008:026)

Will Drewry reported multiple flaws in how libicu processed certain malformed regular expressions. If an application linked against libicu, such as OpenOffice.org, processed a carefully-crafted regular expression, it could potentially cause the execution of arbitrary code with the privileges of t...

Mandriva Linux Security Advisory : unzip (MDVSA-2008:068)

Tavis Ormandy of Google Security discovered an invalid pointer flaw in unzip that could lead to the execution of arbitrary code with the privileges of the user running unzip. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : openssl (MDVSA-2008:107)

Testing using the Codenomicon TLS test suite discovered a flaw in the handling of server name extension data in OpenSSL 0.9.8f and OpenSSL 0.9.8g. If OpenSSL has been compiled using the non-default TLS server name extensions, a remote attacker could send a carefully crafted packet to a server...

MDKA-2007:106-1 : autofs

The autofs init script was missing a dependency on ypbind, preventing a correct initialisation order in parallel mode, when storing autofs configuration in NIS bug 34559. Update: The previous update shipped with an incorrect LDAP lookup module that would prevent the automount daemon from starting...

MDVA-2008:177 : lirc

The LIRC packages included with Mandriva Linux 2008 and Mandriva Linux 2008 Spring did not include the 'commandir' module, which is necessary along with the 'lirccmdir' module to properly support CommandIR remote controls. These updated packages do include the module. %NASLMINLEVEL 70300...

Mandriva Linux Security Advisory : libvorbis (MDVSA-2008:102)

Will Drewry of the Google Security Team reported several vulnerabilities in how libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it would cause an application linked to libvorbis to crash or possibly execute arbitrary code when opened...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:223)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Buffer overflow in format descriptor parsing in the uvcparseformat function in drivers/media/video/uvc/uvcdriver.c in uvcvideo in the video4linux V4L implementation in the Linux kernel before 2.6.26.1 has unknown impact...

Mandriva Linux Security Advisory : cups (MDVSA-2008:081)

A heap-based buffer overflow in CUPS 1.2.x and later was discovered by regenrecht of VeriSign iDenfense that could allow a remote attacker to execute arbitrary code via a crafted CGI search expression CVE-2008-0047. A validation error in the Hp-GL/2 filter was also discovered CVE-2008-0053...

Mandriva Linux Security Advisory : virtualbox (MDVSA-2009:011)

A vulnerability have been discovered and corrected in VirtualBox, affecting versions prior to 2.0.6, which allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-qateam-ipc/lock temporary file CVE-2008-5256. The updated packages have been patched to prevent this...

Mandriva Linux Security Advisory : qt4 (MDVSA-2008:042)

A potential vulnerability was discovered in Qt4 version 4.3.0 through 4.3.2 which may cause a certificate verification in SSL connections not to be performed. As a result, code that uses QSslSocket could be tricked into thinking that the certificate was verified correctly when it actually failed ...

Mandriva Linux Security Advisory : eog (MDVSA-2009:063)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current eog working directory CVE-2008-5987. This update...

Mandriva Linux Security Advisory : kvm (MDVSA-2009:009)

Security vulnerabilities have been discovered and corrected in VNC server of kvm version 79 and earlier, which could lead to denial-of-service attacks CVE-2008-2382, and make it easier for remote crackers to guess the VNC password CVE-2008-5714. The updated packages have been patched to prevent...

Mandriva Linux Security Advisory : gnumeric (MDVSA-2009:043)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Gnumeric working directory CVE-2009-0318. This upda...

Mandriva Linux Security Advisory : cups (MDVSA-2009:027)

A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file CVE-2009-0032. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : exiv2 (MDVSA-2008:006)

An integer overflow in the Exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...