Mandriva Security

MDVSA-2008:150: Updated mysql packages fix vulnerabilities

Multiple buffer overflows in yaSSL, which is used in MySQL, allowed
remote attackers to execute arbitrary code (CVE-2008-0226) or cause
a denial of service via a special Hello packet (CVE-2008-0227).

Sergei Golubchik found that MySQL did not properly validate optional
data or index directory paths given in a CREATE TABLE statement; as
well it would not, under certain conditions, prevent two databases
from using the same paths for data or index files. This could allow
an authenticated user with appropriate privilege to create tables in
one database to read and manipulate data in tables later created in
other databases, regardless of GRANT privileges (CVE-2008-2079).

The updated packages have been patched to correct these issues.

MDVSA-2008:149: Updated mysql packages fix vulnerabilities

Sergei Golubchik found that MySQL did not properly validate optional
data or index directory paths given in a CREATE TABLE statement; as
well it would not, under certain conditions, prevent two databases
from using the same paths for data or index files. This could allow
an authenticated user with appropriate privilege to create tables in
one database to read and manipulate data in tables later created in
other databases, regardless of GRANT privileges (CVE-2008-2079).

The updated packages have been patched to correct this issue.

MDVSA-2008:148: Updated Firefox packages fix vulnerabilities

Security vulnerabilities have been discovered and corrected in the
latest Mozilla Firefox program, version 2.0.0.16 (CVE-2008-2785,
CVE-2008-2933).

This update provides the latest Firefox to correct these issues.

MDVA-2008:109: Updated timezone packages provide updated DST information

Updated timezone packages are being provided for older Mandriva Linux
systems that do not contain the new Daylight Savings Time information
for 2008 and later for certain time zones. These updated packages
contain the new information.

MDVSA-2008:147: Updated pcre packages fix vulnerability

Tavis Ormandy of the Google Security Team discovered a heap-based
buffer overflow when compiling certain regular expression patterns.
This could be used by a malicious attacker by sending a specially
crafted regular expression to an application using the PCRE library,
resulting in the possible execution of arbitrary code or a denial of
service (CVE-2008-2371).

The updated packages have been patched to correct this issue.

MDVSA-2008:146: Updated poppler packages fix arbitrary code execution vulnerability

A memory management issue was found in libpoppler by Felipe Andres
Manzano that could allow for the execution of arbitrary code with
the privileges of the user running a poppler-based application,
if they opened a specially crafted PDF file (CVE-2008-2950).

The updated packages have been patched to correct this issue.

MDVA-2008:108: Updated x11-server packages fix offscreen pixmaps drawing issue

This x11-sever update disables offscreen pixmaps by default as they
were causing drawing issues with Firefox 3 and other applications.
To re-enable this option, use 'Option XaaOffscreenPixmaps on'
in xorg.conf.

MDVA-2008:107: Updated myspell-dictionaries packages fix thesaurus issues

Some thesaurus files of some languages were not properly working
witn Mandriva Linux 2008.1. The thesaurus would not bring out the
meaning and synonym for any searched word for the following languages:
American English, Spanish, French, German, Polish, Czeck, Slovakian,
and Hungarian. This release updates the thesaurus files for these
languages so that they will work with the Mandriva OpenOffice.org
version 2.4.1.5.

MDVSA-2008:145: Updated bluez/bluez-utils packages fix SDP packet parsing vulnerability

An input validation flaw was found in the Bluetooth Session Description
Protocol (SDP) packet parser used in the Bluez bluetooth utilities.
A bluetooth device with an already-trusted relationship, or a local
user registering a service record via a UNIX socket or D-Bus interface,
could cause a crash and potentially execute arbitrary code with the
privileges of the hcid daemon (CVE-2008-2374).

The updated packages have been patched to correct this issue.

MDVSA-2008:144: Updated openldap packages fix slapd DoS vulnerability

A denial of service vulnerability was discovered in the way
the OpenLDAP slapd daemon processed certain network messages.
An unauthenticated remote attacker could send a specially crafted
request that would crash the slapd daemon (CVE-2008-2952).

The updated packages have been patched to correct this issue.