[ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:027 http://www.mandriva.com/security/ Package : pulseaudio Date : January 25, 2008 Affected: 2007.1, 2008.0 Problem Description: A programming flaw was found in Pulseaudio versions older than 0.9.9, by which...

[ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:008 http://www.mandriva.com/security/ Package : kernel Date : January 11, 2008 Affected: Corporate 4.0 Problem Description: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The CIF...

[ MDKSA-2007:240 ] - Updated libnfsidmap packages fix username lookup flaw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:240 http://www.mandriva.com/security/ Package : libnfsidmap Date : December 7, 2007 Affected: 2007.0, Corporate 4.0 Problem Description: The NFSv4 ID mapper prior to 0.17 did not properly handle return value...

[ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:232 http://www.mandriva.com/security/ Package : kernel Date : November 28, 2007 Affected: 2008.0 Problem Description: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The minix...

Mandrake Linux Security Advisory : cpio (MDKSA-2007:233)

Buffer overflow in the safernamesuffix function in GNU cpio has unspecified attack vectors and impact, resulting in a crashing stack. This problem is originally found in tar, but affects cpio too, due to similar code fragments. CVE-2007-4476 Directory traversal vulnerability in cpio 2.6 and earli...

[ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:229 http://www.mandriva.com/security/ Package : phpMyAdmin Date : November 20, 2007 Affected: Corporate 4.0 Problem Description: A few vulnerabilities and security-related issues have been fixed in phpMyAdmi...

[ MDKSA-2007:207 ] - Updated perl packages fix vulnerability

Package : perl Date : November 5, 2007 Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Tavis Ormandy and Will Drewry discovered a flaw in Perl's regular expression engine. Specially crafted input to a regular expression can cause Per...

MDKA-2007:096 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2007 for certain time zones. These updated packages contain the new information. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

[ MDKSA-2007:192 ] - Updated mplayer packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:192 http://www.mandriva.com/security/ Package : mplayer Date : October 1, 2007 Affected: 2007.0, 2007.1 Problem Description: A heap-based buffer overflow was found in MPlayer's AVI handling that could allow ...

[Full-disclosure] [ MDKSA-2007:183 ] - Updated qt3/qt4 packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:183 http://www.mandriva.com/security/ Package : qt Date : September 13, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A buffer overflow was found in how Qt expanded malform...

[ MDKSA-2007:166 ] - Updated rsync packages fix off-by-one buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:166 http://www.mandriva.com/security/ Package : rsync Date : August 18, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: Sebastian Krahmer of the SUSE Security Team discovered an off-by-one...

MDKA-2007:086 : mozilla-firefox

The previous Mozilla Firefox updates did not properly handle the default and GNOME themes which prevented buttons from being displayed. As well, there were some problems with language support. These updated packages are being provided to correct the issues. %NASLMINLEVEL 999999 @DEPRECATED@ This...

MDKA-2007:085 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2007 for certain time zones. These updated packages contain the new information. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

MDKA-2007:084 : update-alternatives

A new version of update-alternatives is being made available that corrects a number of bugs in the tool and how symlink handling was performed. The new version also has new command-line options and updated documentation. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Unfixed XSS vulnerability at www.mandrivalinux.eu

Security researcher st@rext, has submitted on 08/10/2007 a cross-site-scripting XSS vulnerability affecting www.mandrivalinux.eu, which at the time of submission ranked 299477 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is...

[ MDKSA-2007:151 ] - Updated qt3 packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:151 http://www.mandriva.com/security/ Package : qt3 Date : August 1, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A number of format string flaws have been discovered in h...

[Full-disclosure] [ MDKSA-2007:146 ] - Updated perl-Net-DNS packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:146 http://www.mandriva.com/security/ Package : perl-Net-DNS Date : July 12, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A flaw was discovered in the perl Net::DNS module...

MDKA-2007:066 : perl-DBD-mysql

The perl module DBD::mysql 3.006 had a bug which finished the connections before all active statements were cleared. This bug has been fixed in upstream release DBD::mysql 3.007. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

[ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:135 http://www.mandriva.com/security/ Package : webmin Date : June 23, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: Multiple cross-site scripting XSS vulnerabilities were discovered in...

[ MDKSA-2007:132 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:132 http://www.mandriva.com/security/ Package : madwifi-source Date : June 21, 2007 Affected: 2007.0, 2007.1 Problem Description: The 802.11 network stack in MadWifi prior to 0.9.3.1 would alloa remote...