Home > Security > Advisories

Advisories

Mandriva Advisories

Updates for both security and non-functional packages are essential for a smooth-running system. Mandriva recommends that all users upgrade to the packages issued by any advisory to prevent problems with your system and unauthorized intrusion or denial of service attacks.

A graphical update utility called MandrivaUpdate is installed on your Mandriva Linux desktop. All you have to do is launch MandrivaUpdate to update your system through the GUI utility. The program lets you choose your FTP server within a list of server mirror. Then it fetches each update you have to make and lets you choose those you really need. In Mandrakelinux 8.x+, MandrakeUpdate has been replaced by the Software Manager.

Security update advisories are sent to the security mailing lists.

All security announcements and updated RPMs are signed with the GPG key of the Mandriva Security Team which is available for download.

Legend/Filters: Security Update Bugfix Update General Update


Date Advisory Synopsis
2002-10-15 MDKSA-2002:067 Future support for Linux-Mandrake 7.1 and Corporate Server 1.0.1 will be unavailable
2002-10-10 MDKSA-2002:066 Updated tar packages fix directory traversal vulnerability
2002-10-10 MDKSA-2002:065 Updated unzip packages fix directory traversal vulnerability
2002-10-01 MDKSA-2002:063 Updated fetchmail packages fix various vulnerabilities
2002-09-23 MDKSA-2002:061 Updated glibc packages fix Sun RPC vulnerability
2002-09-10 MDKSA-2002:059 Updated php packages fix mail() vulnerability
2002-08-29 MDKSA-2002:054 Updated gaim packages fix URL-handling insecurities
2002-08-28 MDKSA-2002:055 Updated hylafax packages fix multiple vulnerabilities
2002-08-14 MDKSA-2002:052 Updated sharutils packages fix local file vulnerability
2002-08-14 MDKSA-2002:051 Updated xchat packages fix /dns command insecurities
2002-08-13 MDKSA-2002:050 Updated glibc packages fix buffer overflow
2002-08-13 MDKSA-2002:049 Updated libpng packages fix buffer overflow
2002-08-08 MDKSA-2002:048 Updated mod_ssl packages fix buffer overflow
2002-08-08 MDKSA-2002:047 Updated util-linux packages fix temporary file race
2002-08-06 MDKSA-2002:046-1 Updated openssl packages fix various vulnerabilities
2002-07-30 MDKSA-2002:046 Updated openssl packages fix various vulnerabilities
2002-07-29 MDKSA-2002:045 Updated mm packages fix temporary file vulnerability
2002-07-17 MDKSA-2002:044 Updated squid packages fix multiple vulnerabilities
2002-07-16 MDKSA-2002:043 Updated bind packages fix buffer overflow in resolver libs
2002-07-04 MDKSA-2002:041 Updated kernel packages fix multiple vulnerabilities
2002-07-02 MDKSA-2002:040-1 Updated openssh packaegs fix remote vulnerability
2002-07-02 MDKA-2002:008 New rpm-macros packages provide new RPM macros
2002-06-24 MDKSA-2002:040 Updated openssh packages provide privilege separation
2002-06-22 MDKSA-2002:039-2 Updated apache packages fix remotely exploitable conditions
2002-06-21 MDKSA-2002:039-1 Updated apache packages fix DoS vulnerability
2002-05-28 MDKSA-2002:036 Updated fetchmail packages fix array bounds checking
2002-05-27 MDKSA-2002:034 Updated imap packages fix buffer overflow vulnerability
2002-05-21 MDKSA-2002:033 Updated webmin packages fix buffer overflow vulnerability
2002-05-16 MDKSA-2002:032 Updated tcpdump packages fix buffer overflows
2002-04-25 MDKSA-2002:029 Updated imlib packages fix image viewing vulnerabilities
2002-04-25 MDKSA-2002:028 Updated sudo packages fix heap corruption vulnerability
2002-04-16 MDKSA-2002:027 Updated squid packages fix DoS vulnerability
2002-04-11 MDKSA-2002:026 Updated libsafe packages fix inadequate format string protection
2002-03-20 MDKSA-2002:025 Instructions correcting insecure configuration of kdm
2002-03-13 MDKSA-2002:024 Updated rsync packages fix multiple vulnerabilities
2002-03-13 MDKSA-2002:023-1 Updated zlib-related packages fix double free vulnerability
2002-03-12 MDKSA-2002:023 Updated zlib-related packages fix double free vulnerability
2002-03-12 MDKSA-2002:022 Updated zlib packages fix double free vulnerability
2002-03-07 MDKSA-2002:020 Updated mod_ssl packages fix a buffer overflow vulnerability
2002-03-07 MDKSA-2002:019 Updated openssh packages fix local root vulnerability
2002-02-28 MDKSA-2002:017 Updated php packages fix file upload vulnerability
2002-02-26 MDKSA-2002:016-1 Updated squid packages fix dependency on openldap
2002-02-21 MDKSA-2002:016 Updated squid packages fix several insecurities
2002-02-15 MDKSA-2002:014 Updated ucd-snmp packages fix multiple vulnerabilities
2002-01-31 MDKSA-2002:011 Updated gzip packages fix buffer overflow
2002-01-28 MDKSA-2002:010 Updated enscript packages fix temporary file vulnerability
2002-01-28 MDKSA-2002:009 Updated rsync packages fix unsigned insecurities
2002-01-17 MDKSA-2002:006 Updated xchat packages fix CTCP vulnerability
2002-01-17 MDKSA-2002:002-1 Updated mutt packages fix buffer overflow
2002-01-15 MDKSA-2002:003 Updated sudo packages fix local root vulnerability
2002-01-08 MDKSA-2002:002 Updated mutt packages fix buffer overflow
2001-12-19 MDKSA-2001:095 Updated glibc packages fix buffer overflow vulnerability
2001-12-19 MDKSA-2001:094 Updated libgtop packages fix buffer overflow and format string vulnerabilities
2001-12-13 MDKSA-2001:092 Updated openssh packages fix local vulnerability with UseLogin
2001-11-29 MDKSA-2001:090 Updated wu-ftpd packages fix potential remote root compromise
2001-11-29 MDKSA-2001:089 Updated postfix packages fix potential remote DoS
2001-11-27 MDKSA-2001:077-1 Updated apache packages fix a number of vulnerabilities
2001-11-21 MDKSA-2001:088 Updated squid packages fix potential DoS
2001-11-20 MDKSA-2001:086 Updated tetex packages fix temporary file insecurities
2001-11-20 MDKSA-2001:085 Updated procmail packages fix crash insecurities
2001-11-20 MDKSA-2001:082-1 Updated kernel 2.2 packages fix additional remote vulnerability
2001-11-20 MDKSA-2001:053-1 Updated gnupg packages fix write permissions due to setgid bit
2001-11-20 MDKA-2001:021 Updated mktemp packages can create temporary directories
2001-10-26 MDKSA-2001:082 Updated kernel 2.2 packages fix two local vulnerabilities
2001-10-16 MDKSA-2001:081 Updated openssh packages fix dishonored key option
2001-10-15 MDKSA-2001:080 Updated Zope packages fix insecurity with DTML scripting
2001-09-21 MDKSA-2001:078 Updated uucp packages fix local vulnerability
2001-09-18 MDKSA-2001:077 Updated apache packages fix path discovery vulnerability
2001-09-12 MDKSA-2001:073-1 Updated xloadimage packages fix boundary check vulnerability
2001-08-31 MDKSA-2001:074 Updated WindowMaker packages fix buffer overflow vulnerability
2001-08-31 MDKSA-2001:073 Updated xli packages fix boundary check vulnerability
2001-08-31 MDKSA-2001:072 Updated fetchmail packages fix input validation vulnerability
2001-08-13 MDKSA-2001:069 Updated openldap packages fix invalid packet handling vulnerability
2001-08-13 MDKSA-2001:068 Updated telnet packages fix buffer overflow vulnerability
2001-07-25 MDKSA-2001:067 Updated elm packages fix buffer overflow vulnerability
2001-07-25 MDKSA-2001:066 Updated squid packages fix httpd_accel_with_proxy vulnerability
2001-07-18 MDKSA-2001:065 Updated openssl packages fix predictable PRNG vulnerability
2001-07-05 MDKSA-2001:063 Updated fetchmail packages fix buffer overflow
2001-06-29 MDKSA-2001:062 Updated samba packages fix %m macro vulnerability
2001-06-20 MDKSA-2001:059 Updated webmin packages fix environment leaking vulnerabilities
2001-06-20 MDKSA-2001:058 Updated ispell packages fix temporary file insecurities
2001-06-13 MDKSA-2001:056 Updated tcpdump packages fix buffer overflows
2001-06-11 MDKSA-2001:054 Updated imap packages fix several buffer overflow vulnerabilities
2001-05-30 MDKSA-2001:053 Updated gnupg packages fix a format string vulnerability
2001-05-25 MDKSA-2001:052 Updated ncurses packages fix buffer overflows
2001-05-24 MDKA-2001:007 Updated pam packages provide system-auth facility which allows OpenSSH to work
2001-05-21 MDKSA-2001:040-1 Updated samba packages fix temporary file insecurities
2001-05-21 MDKSA-2001:033-2 Updated openssh packages fix interoperability with older OpenSSH/SSH versions
2001-05-15 MDKSA-2001:047-1 Updated pine packages fix menu entry updating for 7.1 and Corporate Server
2001-05-10 MDKSA-2001:051 Updated minicom packages fix format string vulnerabilities
2001-05-10 MDKSA-2001:050 Updated vixie-cron packages fix local root vulnerability
2001-05-10 MDKSA-2001:049 Updated Zope packages fix security problem with ZClass permission mappings
2001-05-07 MDKSA-2001:047 Updated pine packages fix temporary file vulnerabilities
2001-05-03 MDKSA-2001:045 Updated gnupg packages fix various insecurities
2001-04-27 MDKSA-2001:044 Updated gftp packages fix format string vulnerability
2001-04-25 MDKSA-2001:042 Updated nedit packages fix temporary file vulnerability
2001-04-24 MDKSA-2001:041 Updated hylafax packages fix potential root exploit in hfaxd
2001-04-20 MDKSA-2001:040 Updated samba packages fix temporary file insecurities
2001-04-18 MDKSA-2001:038 Updated netscape packages fix improper GIF parsing
2001-04-17 MDKSA-2001:037 Updated kernel packages fix a number of serious security flaws
2001-04-06 MDKSA-2001:036 Updated ntp and xntp3 packages fix buffer overflows that can lead to remote root compromise
2001-03-27 MDKSA-2001:035 Updated vim packages fix parsing of malicious VIM codes embedded in documents
2001-03-23 MDKSA-2001:033-1 Updated openssh packages for 7.0/7.1 fix potential inability to login
2001-03-22 MDKSA-2001:034 Updated timed packages fix remote Denial of Service vulnerability
2001-03-22 MDKSA-2001:033 Updated openssh packages enhance prevention of passive analysis of ssh traffic
2001-03-20 MDKSA-2001:032 Updated licq packages fix URL parsing vulnerability
2001-03-20 MDKSA-2001:030-1 Updated sgml-tools packages fix dependancy issues for 7.1 and Corporate Server
2001-03-19 MDKSA-2001:031 Updated mutt packages fix format string vulnerability
2001-03-15 MDKSA-2001:030 Updated sgml-tools packages fix insecure handling of temporary files
2001-03-13 MDKSA-2001:024-1 Updated sudo packages resolve dependancy issues for 7.1 packages
2001-03-09 MDKSA-2001:028 Updated slrn packages fix buffer overflows
2001-03-07 MDKSA-2001:027 Updated eperl packages fix potential buffer overflows
2001-03-06 MDKSA-2001:026 Updated joe packages fix vulnerability with .joerc files in CWD
2001-02-26 MDKSA-2001:025 Updated Zope packages fix vulnerabilities with ZClass instances
2001-02-26 MDKSA-2001:024 Updated sudo packages fix a buffer overflow
2001-02-20 MDKSA-2001:022 Updated vixie-cron packages fix buffer overflow problem with crontabs
2001-01-31 MDKSA-2001:019 Updated xemacs packages fix buffer overflow issues
2001-01-31 MDKSA-2001:018 Updated kdesu packages fix potential local root compromise
2001-01-29 MDKSA-2001:017 Updated bind packages fix multiple vulnerabilities
2001-01-26 MDKSA-2001:016 Updated webmin packages fix temporary file insecurities
2001-01-26 MDKSA-2001:015 Updated exmh packages fix temporary file insecurities
2001-01-26 MDKSA-2001:014-1 Updated MySQL packages fix buffer overflow problems
2001-01-18 MDKSA-2001:012 Updated glibc packages fix security problems with LD_PRELOAD variable and SUID/SGID applications
2001-01-15 MDKSA-2001:001-2 Updated wu-ftpd packages fix incorrect pam support file
2001-01-12 MDKSA-2001:011 Updated linuxconf packages fix potential temp file race
2001-01-12 MDKSA-2001:001-1 Updated wu-ftpd packages fix incorrect dependency on xinetd
2001-01-10 MDKSA-2001:010 Updated inn packages fix potential temp file race
2001-01-10 MDKSA-2001:009 Updated mgetty packages fix potential temp file race
2001-01-10 MDKSA-2001:008-1 Updated diffutils packages fix potential temp file race
2001-01-10 MDKSA-2001:008 Updated diffutils packages fix potential temp file race
2001-01-10 MDKSA-2001:007 Updated shadow-utils packages fix potential temp file race
2001-01-10 MDKSA-2001:006 Updated gpm packages fix potential temp file race
2001-01-10 MDKSA-2001:005 Updated rdist packages fix potential temp file race
2001-01-10 MDKSA-2001:004 Updated getty_ps packages fix potential temp file race
2001-01-10 MDKSA-2001:003 Updated squid packages fix potential temp file race
2001-01-10 MDKSA-2001:002 Updated arpwatch packages fix potential temp file race
2001-01-10 MDKSA-2001:001 Updated wu-ftpd packages fix temp file creation bug
2000-12-20 MDKSA-2000:087 Updated gnupg packages fix problem importing private keys along with public keys
2000-12-19 MDKSA-2000:086 Updated Zope packages fix incorrect protection of data updating methods
2000-12-18 MDKSA-2000:085 Updated slocate packages fix vulnerability in database reading code
2000-12-18 MDKSA-2000:084 Updated rp-pppoe packages fix security problems
2000-12-16 MDKSA-2000:083 Updated Zope packages fix security registration of legacy names for objects
2000-12-16 MDKSA-2000:082 Updated pam packages fix buffer overflow in pam_localuser module
2000-12-14 MDKSA-2000:080 Updated netscape packages fix a buffer overflow in HTML parsing code
2000-12-14 MDKSA-2000:079 Updated BitchX packages fix insecure handling of DNS information
2000-12-12 MDKSA-2000:078 Updated mc packages fix security problems with cons.saver program
2000-12-09 MDKSA-2000:076 Updated ed packages fix insecure creation of temporary files
2000-11-28 MDKSA-2000:075 Updated bash1 packages fix insecure creation of temporary files
2000-11-27 MDKSA-2000:073-1 Updated description of pine vulnerabilities
2000-11-24 MDKSA-2000:071-2 Updated modutils packages fix problem with improper safe guard measures
2000-11-23 MDKSA-2000:071-1 Updated modutils packages fix problem with improper safe guard measures
2000-11-22 MDKSA-2000:074 Updated ghostscript packages fix usage of mktemp and improper LD_RUN_PATH
2000-11-20 MDKSA-2000:073 Updated pine packages fix security problems
2000-11-20 MDKSA-2000:072 Updated joe packages fix unsafe creation of DEADJOE files
2000-11-16 MDKSA-2000:071 Updated modutils packages fix insecure method of loading modules
2000-11-14 MDKSA-2000:068-1 Updated openssh packages fix broken PAM support
2000-11-13 MDKSA-2000:069 Updated tcsh packages fix insecure creation of temporary files
2000-11-13 MDKSA-2000:068 Updated openssh packages fix improper checking of X11 forwarding permissions
2000-11-10 MDKSA-2000:067 Updated bind packages fix improper handling of compressed zone transfers
2000-11-10 MDKSA-2000:066-1 Updated nss_ldap packages are available under the new packaging scheme
2000-11-10 MDKA-2000:013 Updated MandrakeUpdate packages are available which recognize updates with the new packaging scheme
2000-11-03 MDKSA-2000:066 Updated nss_ldap packages fix a race condition
2000-11-02 MDKSA-2000:065 Linux-Mandrake is not vulnerable to insecure environment variables with dump
2000-11-02 MDKA-2000:011 Updated XFree86 packages provide proper recognition of GE Force 2 GTS and MX cards
2000-10-23 MDKSA-2000:064 Updated ybpind and ypserv packages fix string parsing problems and buffer overflow vulnerabilities
2000-10-21 MDKSA-2000:063-1 Updated gnupg packages are properly built for i586
2000-10-20 MDKSA-2000:063 Updated gnupg packages fix vulnerability aith files signed with multiple keys
2000-10-18 MDKSA-2000:060-2 Updated apache packages fix improper permissions on the suexec wrapper
2000-10-18 MDKSA-2000:060-1 Updated apache packages fix improper permissions on the suexec wrapper
2000-10-12 MDKSA-2000:062 Updated mod_php3 packages fix format string attack vulnerability
2000-10-12 MDKSA-2000:061 Updated cfengine packages fix numerous string format vulnerabilities
2000-10-12 MDKSA-2000:057-1 Updated openssh packages not required
2000-10-11 MDKSA-2000:060 Updated apache packages fix vulnerability with mod_rewrite module
2000-10-11 MDKSA-2000:059 Linux-Mandrake is not vulnerable to usermode potential format string vulnerabilities
2000-10-11 MDKSA-2000:058 Linux-Mandrake is not vulnerable to boa insecure file access vulnerabilities
2000-10-10 MDKSA-2000:057 Updated openssh packages are available
2000-10-10 MDKA-2000:009-1 Updated sysklogd packages fix continual archiving of log files
2000-10-09 MDKA-2000:010 Updated modutils packages fix crashing problems due to compiler options
2000-10-07 MDKSA-2000:056 Updated tmpwatch packages fix local denial of service and root vulnerabilities
2000-10-04 MDKSA-2000:054 Updated lpr packages fix a format string bug
2000-10-02 MDKSA-2000:053 Updated traceroute packages fix segfault problem
2000-10-02 MDKSA-2000:052 Updated xinitrc packages fix disabling of Xauthority mechanism of the localhost
2000-09-29 MDKA-2000:009 Updated logrotate packages fix continual archiving of log files
2000-09-27 MDKSA-2000:051 Updated esound packages fix insecure permissions of temporary directory
2000-09-25 MDKSA-2000:050-1 Updated sysklogd packages fix local root compromise in klogd
2000-09-22 MDKA-2000:006 Updated MandrakeUpdate packages fix problem creating temporary directory
2000-09-18 MDKSA-2000:050 Updated sysklogd packages fix local root compromise in klogd
2000-09-18 MDKA-2000:005-1 Updated kdenetwork packages fix locale problem with previous upgrade
2000-09-16 MDKA-2000:005 Updated kdenetwork packages fix date bug in KMail that causes index file corruption
2000-09-14 MDKSA-2000:049 Linux-Mandrake is not vulnerable to exploitable buffer overflows in eject
2000-09-13 MDKSA-2000:048 Updated mod_php3 packages fix vulnerability with file uploads
2000-09-12 MDKSA-2000:047 Linux-Mandrake is not vulnerable to exploitable buffer overflows in either pam module
2000-09-11 MDKSA-2000:046 Updated mod_perl packages fix insecure Options directive
2000-09-11 MDKA-2000:004-1 Updated samba packages fix missing symbolic link
2000-09-06 MDKSA-2000:045 Updated glibc packages fix potential local root exploits
2000-09-05 MDKSA-2000:044 Linux-Mandrake is not vulnerable to local root compromise in screen
2000-09-05 MDKA-2000:004 Updated samba packages provide connectivity support for Windows 2000 systems
2000-09-05 MDKA-2000:003-1 Updated quota packages fix conflict with the nfs-utils package
2000-09-01 MDKSA-2000:043 Updated Zope packages fix insecure getRoles method
2000-08-31 MDKSA-2000:042 Updated mgetty packages fix temporary file vulnerabilities
2000-08-29 MDKSA-2000:041 Updated xpdf packages fix temporary file vulnerabilities and problems with URL-links
2000-08-29 MDKSA-2000:040 Updated glibc packages fix potential local root exploits
2000-08-25 MDKSA-2000:022-1 Updated dhcp packages fix potential remote root compromise by a corrupt DHCP server
2000-08-24 MDKSA-2000:039 Updated xchat packages fix malicious URL vulnerabilities
2000-08-23 MDKSA-2000:038 Updated xlockmore packages fix improper passing of display name
2000-08-22 MDKSA-2000:037 Linux-Mandrake is not vulnerable to insecure configurations generated by gnome-lokkit
2000-08-21 MDKSA-2000:036 Updated netscape packages fix serious problems with Java
2000-08-16 MDKSA-2000:035 Updated Zope packages fix insecure getRoles method
2000-08-12 MDKSA-2000:034 Updated MandrakeUpdate packages fix potential race condition
2000-08-11 MDKSA-2000:033-1 Disable Java to prevent serious security problems under Netscape
2000-08-10 MDKSA-2000:033 Disable Java to prevent serious security problems under Netscape
2000-08-09 MDKSA-2000:032 Linux-Mandrake is not vulnerable
2000-08-08 MDKSA-2000:031 Updated perl packages fix security problems with setuidperl
2000-08-02 MDKSA-2000:030 Linux-Mandrake is not vulnerable to mailman format bugs
2000-08-01 MDKSA-2000:029 Updated pam packages fix potential remote exploit with the pam_console module
2000-08-01 MDKSA-2000:028 Updated kon2 packages fix potential local root compromise
2000-08-01 MDKSA-2000:027-1 Correction to md5sums published in previous advisory
2000-08-01 MDKA-2000:003 Updated quota packages fix conflict with the nfs-utils package
2000-07-31 MDKSA-2000:027 Updated netscape packages fix overflow flaw in improper JPEG verification code
2000-07-28 MDKSA-2000:026 Updated Zope packages fix improper protection of the DocumentTemplate package
2000-07-27 MDKSA-2000:025 Updated gpm packages fix a number of security issues
2000-07-27 MDKSA-2000:024 Linux-Mandrake is not vulnerable to OpenLDAP insecure file permissions
2000-07-22 MDKSA-2000:023 Updated inn packages fix vulnerability with verifycancels and other security problems
2000-07-21 MDKSA-2000:022 Updated dhcp packages fix potential remote root compromise by a corrupt DHCP server
2000-07-18 MDKSA-2000:021 Updated nfs-utils packages possible remote root compromise
2000-07-18 MDKSA-2000:020 Updated usermode packages fix non-root users being able to reboot or shutdown the system
2000-07-14 MDKSA-2000:019 Updated cvsweb packages fix unauthorized shell access
2000-07-11 MDKSA-2000:018 Updated dump packages fix potential buffer overflow exploit
2000-07-11 MDKA-2000:002 Updated isdn4k-utils packages provide a working isdn4k-utils
2000-07-07 MDKSA-2000:017 Updated BitchX packages fix denial of service vulnerability
2000-07-07 MDKSA-2000:016 Updated inn packages fix vulnerability with verifycancels
2000-07-07 MDKSA-2000:015 Updated man packages fix temporary file insecurities
2000-07-02 MDKSA-2000:014 Updated wu-ftpd packages fix format string vulnerabilities
2000-07-02 MDKSA-2000:013 Updated dhcp packages fix potential remote root compromise
2000-06-26 MDKA-2000:001 Updated initscripts packages fix problems with the csh shell
2000-06-24 MDKSA-2000:012 Updated kernel packages provide POSIX capabilities
2000-06-23 MDKA-2000:000 Updated qt packages fix problems displaying european accents
2000-06-04 MDKSA-2000:011 Updated xlockmore packages fix insecure viewing of shadow passwords
2000-06-04 MDKSA-2000:010 Updated bind packages fix remotely exploitable vulnerabilities
2000-06-03 MDKSA-2000:009 Updated cdrecord packages fix locally exploitable buffer overflow
2000-05-29 MDKSA-2000:008 Updated kdesu packages fix local root compromise
2000-05-24 MDKSA-2000:007 Updated dump packages remove setgid bit from the dump binary
2000-05-24 MDKSA-2000:006 Updated xemacs packages fix snooping on other users keystrokes
2000-05-23 MDKSA-2000:005 Updated fdutils packages fix local root compromise