Mandriva Linux Security Advisory : openssl (MDVSA-2009:087)

A security vulnerability has been identified and fixed in OpenSSL, which could crash applications using OpenSSL library when parsing malformed certificates CVE-2009-0590. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:109)

A vulnerability was discovered and corrected in the Linux 2.6 kernel : The bdxioctlpriv function in the tehuti driver tehuti.c in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probabl...

Mandriva Linux Security Advisory : ed (MDVSA-2008:200)

A heap-based buffer overflow was found in GNU ed that allowed context-dependent or user-assisted attackers to execute arbitrary code via a long filename CVE-2008-3916. This update provides GNU ed 1.0, which is not vulnerable to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : emacs (MDVSA-2008:153)

A vulnerability in emacs was found where an attacker could provide a group of files containing local variable definitions and arbitrary Lisp code to be executed when one of the provided files is opened by emacs CVE-2008-2142. The updated packages have been patched to correct this issue...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:122)

A vulnerability was discovered in ClamAV and corrected with the 0.93.1 release : libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read. CVE-2008-2713 Other bugs have also been corrected in 0.93...

Mandriva Linux Security Advisory : vorbis-tools (MDVSA-2008:093)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:229)

An off-by-one error was found in ClamAV versions prior to 0.94.1 that could allow remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted VBA project file CVE-2008-5050. Other bugs have also been corrected in 0.94.1 which is being provided with this update...

Mandriva Linux Security Advisory : openldap (MDVSA-2008:058)

A vulnerability was found in slapo-pcache in slapd of OpenLDAP prior to 2.3.39 when running as a proxy-caching server. It would allocate memory using a malloc variant rather than calloc, which prevented an array from being properly initialized and could possibly allow attackers to cause a denial ...

Mandriva Linux Security Advisory : libpng (MDVSA-2009:051)

A number of vulnerabilities have been found and corrected in libpng : Fixed 1-byte buffer overflow in pngpread.c CVE-2008-3964. This was allready fixed in Mandriva Linux 2009.0. Fix the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0 CVE-2008-5907. Fix a...

Mandriva Linux Security Advisory : bzip2 (MDVSA-2008:075)

Bzip2 versions before 1.0.5 are vulnerable to a denial of service attack via malicious compressed data. The updated packages have been patched to prevent the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2008:010)

A denial of service flaw was discovered by the Google Security Team in the way libxml2 processes malformed XML content. This flaw could cause the application to stop responding. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:007)

A flaw was found in how NTP checked the return value of signature verification. A remote attacker could use this to bypass certificate validation by using a malformed SSL/TLS signature CVE-2009-0021. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandriva Linux Security Advisory : SDL_image (MDVSA-2008:040)

The LWZReadByte and IMGLoadLBMRW functions in SDLimage contain a boundary error that could be triggered to cause a static buffer overflow and a heap-based buffer overflow. If a user using an application linked against the SDLimage library were to open a carefully crafted GIF or IFF ILBM file, the...

Mandrake Security Advisory MDVSA-2009:088 (wireshark)

The remote host is missing an update to wireshark announced via advisory MDVSA-2009:088. OpenVAS Vulnerability Test $Id: mdksa2009088.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:088 wireshark Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:090 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:090. OpenVAS Vulnerability Test $Id: mdksa2009090.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:090 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:092 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:092. OpenVAS Vulnerability Test $Id: mdksa2009092.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:092 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:090 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:090. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Mandriva Update for gnutls MDVSA-2008:227 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2008:227 gnutls Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for net-snmp MDVSA-2008:225 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVSA-2008:225 net-snmp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for tk MDVSA-2008:041 (tk)

Check for the Version of tk OpenVAS Vulnerability Test Mandriva Update for tk MDVSA-2008:041 tk Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...