Mandriva Linux Security Advisory : cups (MDVSA-2009:027)

A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file CVE-2009-0032. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : exiv2 (MDVSA-2008:006)

An integer overflow in the Exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:075)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 3.x, version 3.0.7 CVE-2009-0040, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775, CVE-2009-0776, CVE-2009-0777. This update provides the latest Mozilla Firefox 3.x to correct these...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2009:019)

A vulnerability have been discovered in the load function of the XPM loader for imlib2, which allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file CVE-2008-5187. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C...

Mandriva Linux Security Advisory : evolution (MDVSA-2008:063)

Ulf Harnhammar of Secunia Research discovered a format string flaw in how Evolution displayed encrypted mail content. If a user were to open a carefully crafted email message, arbitrary code could be executed with the permissions of the user running Evolution. The updated packages have been patch...

Mandriva Linux Security Advisory : audit (MDVSA-2008:083)

Joe Nall reported a stack-based buffer overflow in Audit's log handling that could allow remote attackers to execute arbitrary code via a long command argument CVE-2008-1628. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : pycrypto (MDVSA-2009:049-1)

A vulnerability have been discovered and corrected in PyCrypto ARC2 module 2.0.1, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length CVE-2009-0544. The updated packages have been patched to prevent this. Update : The previous...

Mandriva Linux Security Advisory : squid (MDVSA-2008:002)

The cache update reply processing functionality in Squid 2.x before 2.6.STABLE17, and Squid 3.0, allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers. The updated package fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

MDVA-2008:076 : krandr

Display session in Krandr-config window could hang the X server. This update fixes that bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2008:169 : f-spot

f-spot as released with Mandriva Linux 2009.0 presented a misleading dialog when connecting a digital camera. It could also potentially hang when upgrading its database from an earlier version. This update fixes both problems. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as th...

MDVA-2008:172 : kdebase

The kdeeject command did not work, which resulted in a user being able to unmount, but not eject, removable devices. This package update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2008:152 : totem-pl-parser

The totem playlist parser library was not exporting a symbol required by the python binding. This update adds the symbol and fixes several other bugs. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. ...

MDVA-2009:037 : php-ssh2

This update upgrades the php-ssh2 package to version 0.11.0 stable to address intermittent segfaults 39079. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This scrip...

MDVA-2008:124 : rpmdrake

This update fixes several minor issues with rpmdrake, including preventing a rare crash when canceling and fixing a crash when selecting all packages. It also corrects another rare crash when installing packges with strange non-standard names, packages not provided by Mandriva. Finally, it also...

MDVA-2008:010 : vorbis-tools

The oggenc program incorrectly wrote special characters in tags; they were incorrectly replaced with sharp characters. This update makes oggenc properly handle special characters in tags. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2008:009 : rpmdrake

When listing updates to install MandrivaUpdate performs a consistency check of the package set to install. At this stage, MandrivaUpdate was automatically selecting updated packages from non update media, as shown in the confirmation dialog. This behaviour was wrong especially due to the backport...

MDVA-2008:188 : kdewebdev4

The kdewebdev4 package shipped in Mandriva Linux 2009.0 contained several packaging bugs. One is that kfilereplace and kxsldbg had file conflicts on icons, and the other was that no meta package called 'kdewebdev4' was provided. The latter issue would cause kdewebdev4-devel to be installed when...

MDVA-2008:118 : shared-mime-info

The video player totem was associated as an autostart application for audio CDs, but the totem version in Mandriva Linux 2008.1 did not support CD playback anymore. This update removes totem from the list of default applications. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as...

MDVA-2009:033 : tomboy

The synchronization feature in Tomboy would sometimes delete the wrong note. This update fixes the synchronization logic. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDVA-2009:036 : postfix

Postfix as shipped with Mandriva Linux 2009.0 fails to install if rsyslog logging daemon is installed. This updated package adds support for correct Postfix integration with rsyslog. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a securi...