Gentoo Linux Security Advisory 201405-21 - A vulnerability has been found in Charybdis and ShadowIRCd, possibly resulting in remote Denial of Service. Versions less than 3.4.2 are affected.
cd564f81b8571c1bf5b5e258f5cd6b100409c49a7c5ff1d2daa5366096e45bff
Gentoo Linux Security Advisory 201405-20 - A stack-based buffer overflow in JBIG-KIT might allow remote attackers to cause a Denial of Service. Versions less than 2.1 are affected.
b72402b9c4b4b8334ba339b80c5b8e3bde5e2e8f0917ed325dea455f8257a78a
Gentoo Linux Security Advisory 201405-19 - Multiple vulnerabilities have been found in MCrypt, allowing attackers to execute arbitrary code or cause Denial of Service. Versions less than 2.6.8-r2 are affected.
acfc23d623fcfd04590fc6005aa75082db03dd2551cb88ac87bad7cf8ae3e53d
Gentoo Linux Security Advisory 201405-18 - A buffer overflow in OpenConnect could result in execution of arbitrary code or Denial of Service. Versions less than 4.08 are affected.
8fd81a808724458e96eb1c937d4d7331859832e110f78716f99e117c98017ce2
Gentoo Linux Security Advisory 201405-17 - Multiple vulnerabilities have been discovered in Munin which may lead to symlink attacks, file creation, or bypass of security restrictions. Versions less than 2.0.8-r2 are affected.
e8a15c8218cf86576ef0bd53943c4b2c178ec574c17b3e1179293adad2af8a1c
Gentoo Linux Security Advisory 201405-16 - A hash collision vulnerability in Mono allows remote attackers to cause a Denial of Service condition. Versions less than 2.10.9-r2 are affected.
a742d154eb1c548813339e241342a15d6d0ab91189889a419b39fd703bbd1f16
Gentoo Linux Security Advisory 201405-15 - Multiple vulnerabilities have been found in util-linux, the worst of which may lead to Denial of Service. Versions less than 2.22.2 are affected.
e0ed3a80466dfc802963426b3390093d7a6a0ed6d538f5a0df5d687d677017eb
Gentoo Linux Security Advisory 201405-14 - A vulnerability in Ruby OpenID may lead to Denial of Service. Versions less than 2.2.2 are affected.
e3ac40b0ce019ba22c3669de47fc663b85ac2df4ef70c01ef287083f1859631e
Gentoo Linux Security Advisory 201405-13 - Multiple vulnerabilities have been found in Pango, the worst of which allow execution of arbitrary code or Denial of Service. Versions less than 1.28.3-r1 are affected.
faf4b69f963cc7630668de445423879ab7dcf832430345ee6548d09a12472865
Gentoo Linux Security Advisory 201405-12 - Multiple vulnerabilities have been found in Ettercap, the worst of which may allow execution of arbitrary code. Versions less than 0.7.5.2 are affected.
f2c794cb8b84d0b36f0156af5b36d5e9d5b6be2526f4114068471247a559552c
Gentoo Linux Security Advisory 201405-11 - A vulnerability in Bacula may allow remote attackers to obtain sensitive information. Versions less than 5.2.12 are affected.
76cf66128f37533b55fda0ee8640a6ca34fd157cff55fdd1fad7a1636f5f9164
Gentoo Linux Security Advisory 201405-10 - Multiple vulnerabilities have been found in Rack, the worst of which allow execution of arbitrary code. Versions less than 1.4.5 are affected.
8eb7b04a7ff4141bc295620249608014b58fc83e4fff415b3d7a5d1f8a316361
Gentoo Linux Security Advisory 201405-9 - Multiple vulnerabilities have been discovered in ImageMagick, the worst of which could lead to arbitrary code execution. Versions less than 6.8.8.10 are affected.
6e641e70ac29905d8c4d3526df68964e6c184cfc1eace5b729fbbefd0bdb8e69
Gentoo Linux Security Advisory 201405-8 - Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution. Versions less than 0.98 are affected.
ca4bbc6bfc70c0a007ce852addec82b460b849ba6619d6a1566c5cc794ad74fc
Mandriva Linux Security Advisory 2014-104 - eGroupWare before 1.8.007 allows logged in users with administrative privileges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross site request forgery vulnerability that allows creating new administrative users.
163816366349375cb802d0b3bf5aef0485911fb9c176c1929c1d3f52e8c8ef99
Mandriva Linux Security Advisory 2014-101 - Owncloud versions 5.0.16 and 6.0.3 fix several unspecified security vulnerabilities, as well as many other bugs.
bdf9b2bd496204828ef8370a8b35d1424c6743cfd4e0f4cdb1f5eaa2978d08cb
Mandriva Linux Security Advisory 2014-089 - Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service via a long message to cmd.cgi.
f67293a2e15a040d53df4ef35b036e78deb4104e3fc23548eb9b8e45f179064e
Mandriva Linux Security Advisory 2014-093 - Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service via the count parameter to /_uuids.
2ca19ad759d5e98ce336dd74c86a72f5722a73b71befbd76c33ff2ef385f6bcd
Mandriva Linux Security Advisory 2014-099 - Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service via an incomplete SSL/TLS handshake for an IMAP/POP3 connection. The updated packages have been patched to correct this issue.
b82ca56efd8853684a23112efde2dd54f66c4a5430e065066c7fe0aae9e7b563
Mandriva Linux Security Advisory 2014-097 - The LXC driver in libvirt 1.0.1 through 1.2.1 allows local users to delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the virDomainReboot API and a symlink attack on /dev/initctl in the container, related to paths under /proc//root and the virInitctlSetRunLevel function. libvirt was patched to prevent expansion of entities when parsing XML files. This vulnerability allowed malicious users to read arbitrary files or cause a denial of service. The updated packages have been upgraded to the 1.1.3.5 version and patched to correct these issues.
ed55160db0091a2f3521eb28085c1855960ad5f1a486378894808978a59d4533
Mandriva Linux Security Advisory 2014-091 - Cross-site scripting vulnerability in scheduler/client.c in Common Unix Printing System before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.
30e6eecea2171318dfc6d73daaf29f6095de61cbaccd933c3e50786079a68415
Mandriva Linux Security Advisory 2014-103 - Multiple vulnerabilities have been discovered and corrected in WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php. The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie. The updated packages have been patched to correct these issues.
773c10cb4bddf7528da15b0bd9bf90cf62273a774208b5c3484fe51844eb4a8e
Mandriva Linux Security Advisory 2014-100 - An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when processed. A remote attacker, or an untrusted Java application or applet, could possibly use this flaw to execute arbitrary code with the privileges of the user running the Java Virtual Machine. Multiple flaws were discovered in the Hotspot and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws to trigger Java Virtual Machine memory corruption and possibly bypass Java sandbox restrictions. Various other issues have also been addressed.
91824bad36582882c00f6a76ee8ba050b4a1bf940847bce7892c312648b1fe08
Mandriva Linux Security Advisory 2014-102 - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML. Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition. Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema. Various other issues have also been addressed.
4c3dfa2c00c7ae25a2d3271ee36d0ae6c4fd0f53e51568e7335f6d0bed64486a
Mandriva Linux Security Advisory 2014-096 - Jinja2, a template engine written in pure python, was found to use /tmp as a default directory for jinja2.bccache.FileSystemBytecodeCache, which is insecure because the /tmp directory is world-writable and the filenames used like 'FileSystemBytecodeCache' are often predictable. A malicious user could exploit this bug to execute arbitrary code as another user.
44d1301723529558867f49387a9bf314f26c0cfebb92615d2c4d9e985a3c2f81