Mandriva Linux Security Advisory : php (MDVSA-2008:127)

A number of vulnerabilities have been found and corrected in PHP : The htmlentities and htmlspecialchars functions in PHP prior to 5.2.5 accepted partial multibyte sequences, which has unknown impact and attack vectors CVE-2007-5898. The outputaddrewritevar function in PHP prior to 5.2.5 rewrites...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:244)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 2.x, version 2.0.0.19 CVE-2008-5500, CVE-2008-5503, CVE-2008-5504, CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510, CVE-2008-5511, CVE-2008-5512, CVE-2008-5513. This update provides the latest...

Mandriva Linux Security Advisory : postfix (MDVSA-2008:190)

A vulnerability in Postfix 2.4 and later was discovered, when running on Linux kernel 2.6, where a local user could cause a denial of service due to Postfix leaking the epoll file descriptor when executing non-Postfix commands CVE-2008-3889. The updated packages have been patched to correct this...

Mandriva Linux Security Advisory : libcdio (MDVSA-2008:037)

A stack-based buffer overflow was discovered in libcdio that allowed context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image file that contains a long joliet file name. In addition, a fix for failed UTF-8 conversions that would...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2008:027)

A programming flaw was found in Pulseaudio versions older than 0.9.9, by which a local user can gain root access, if pulseaudio is installed as a setuid to root binary, which is the recommended configuration. The updated packages fix this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandriva Linux Security Advisory : mailman (MDVSA-2008:061)

Multiple cross-site scripting XSS vulnerabilities were found in Mailman prior to version 2.1.10b1, which allow remote attackers to inject arbitrary web script or HTML via edting templates and the list's info attribute in the web administrator interface. The updated packages have been patched to...

Mandriva Linux Security Advisory : kdelibs (MDVSA-2008:097)

A vulnerability was found in startkdeinit in KDE 3.5.5 through 3.5.9 where, if it was installed setuid root, it could allow local users to cause a denial of service or possibly execute arbitrary code CVE-2008-1671. By default, startkdeinit is not installed setuid root on Mandriva Linux, however...

Mandriva Linux Security Advisory : php-smarty (MDVSA-2009:052)

A vulnerability has been identified and corrected in php-smarty : The expandquotedtext function in libs/SmartyCompiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to templates and 1 a dollar-sign character, aka php executed in...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2008:157)

A vulnerability was found in how ffmpeg handled STR file demuxing. If a user were tricked into processing a malicious STR file, a remote attacker could execute arbitrary code with user privileges via applications linked against ffmpeg CVE-2008-3162. The updated packages have been patched to corre...

Mandriva Linux Security Advisory : perl (MDVSA-2008:165)

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack. The updated packages have been patched to fix this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : xdg-utils (MDVSA-2008:031)

A vulnerability was found in xdg-open and xdg-email commands, which allows remote attackers to execute arbitrary commands if the user is tricked into trying to open a maliciously crafted URL. The updated packages have been patched to prevent the issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:044)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 3.x, version 3.0.5 CVE-2009-0352, CVE-2009-0353, CVE-2009-0354, CVE-2009-0355, CVE-2009-0356, CVE-2009-0357, CVE-2009-0358. This update provides the latest Mozilla Firefox 3.x to correct these issues. As...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:015)

Several vulnerabilities have been discovered in ffmpeg, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESIZE value CVE-2008-4867. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : SDL_image (MDVSA-2008:040)

The LWZReadByte and IMGLoadLBMRW functions in SDLimage contain a boundary error that could be triggered to cause a static buffer overflow and a heap-based buffer overflow. If a user using an application linked against the SDLimage library were to open a carefully crafted GIF or IFF ILBM file, the...

Mandriva Linux Security Advisory : python-django (MDVSA-2008:185)

A cross-site request forgery vulnerability was discovered in Django that, if exploited, could be used to perform unrequested deletion or modification of data. Updated versions of Django will now discard posts from users whose sessions have expired, so data will need to be re-entered in these case...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:132)

A vulnerability was found in gnome-screensaver prior to 2.22.1 when a remote authentication server was enabled. During a network outage, gnome-screensaver would crash upon an unlock attempt, allowing physically local users to gain access to locked sessions CVE-2008-0887. The updated packages have...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:007)

A flaw was found in how NTP checked the return value of signature verification. A remote attacker could use this to bypass certificate validation by using a malformed SSL/TLS signature CVE-2009-0021. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandriva Linux Security Advisory : dia (MDVSA-2009:040)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current dia working directory CVE-2008-5984. This update...

Mandriva Linux Security Advisory : rsh (MDVSA-2008:191)

A vulnerability in the rcp protocol was discovered that allows a server to instruct a client to write arbitrary files outside of the current directory, which could potentially be a security concern if a user used rcp to copy files from a malicious server CVE-2004-0175. This issue was originally...

Mandriva Linux Security Advisory : yelp (MDVSA-2008:175)

A format string vulnerability was discovered in yelp after version 2.19.90 and before 2.24 that could allow remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command-line or via URI helpers in Firefox, Evolution, or possibly other programs...