Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Sign up!
EnGarde Community
What is the most important Linux security technology?
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Latest Newsletters
Linux Advisory Watch: March 27th, 2015
Linux Security Week: March 23rd, 2015
LinuxSecurity Newsletters
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

Mandriva: Subject: [Security Announce] [ MDVSA-2008:182-1 ] wordnet Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Mandrake Rob Holland found several programming errors in WordNet which could lead to the execution or arbitrary code when used with untrusted input (CVE-2008-2149, CVE-2008-3908).

 Mandriva Linux Security Advisory                       MDVSA-2008:182-1

 Package : wordnet
 Date    : September 15, 2008
 Affected: 2008.0, 2008.1

 Problem Description:

 Rob Holland found several programming errors in WordNet which could
 lead to the execution or arbitrary code when used with untrusted input
 (CVE-2008-2149, CVE-2008-3908).


 The previous patch had a typo that caused incorrect behaviour in
 WordNet.  This update uses an update patch that corrects the issue
 and also notes the additional assigned CVE name for these issues.


 Updated Packages:

 Mandriva Linux 2008.0:
 1d0d82775493396e34971c884cbabc01  2008.0/i586/libwordnet3.0-3.0-6.2mdv2008.0.i586.rpm
 eceaba3f5a49a9006bc415e778651bf2  2008.0/i586/libwordnet3.0-devel-3.0-6.2mdv2008.0.i586.rpm
 96fb48c0c5a8b91884294f93bbe47399  2008.0/i586/wordnet-3.0-6.2mdv2008.0.i586.rpm 
 494942f67dad01f8223f20ec9a255cff  2008.0/SRPMS/wordnet-3.0-6.2mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 45a324ee32d6fa613a862b4d905f4738  2008.0/x86_64/lib64wordnet3.0-3.0-6.2mdv2008.0.x86_64.rpm
 e220080ca764c251d274f7ced28ea5fb  2008.0/x86_64/lib64wordnet3.0-devel-3.0-6.2mdv2008.0.x86_64.rpm
 149fb69b656abf7360b750882931de41  2008.0/x86_64/wordnet-3.0-6.2mdv2008.0.x86_64.rpm 
 494942f67dad01f8223f20ec9a255cff  2008.0/SRPMS/wordnet-3.0-6.2mdv2008.0.src.rpm

 Mandriva Linux 2008.1:
 fdbb49dbd64ed7635088b9ee613e5786  2008.1/i586/libwordnet3.0-3.0-6.2mdv2008.1.i586.rpm
 361e9bb12cdf618a12fcd7df41a98690  2008.1/i586/libwordnet3.0-devel-3.0-6.2mdv2008.1.i586.rpm
 e1888e6cbad6140e67932764a479fee7  2008.1/i586/wordnet-3.0-6.2mdv2008.1.i586.rpm 
 ed24b17d2cfc64cdc814de1114a94f4b  2008.1/SRPMS/wordnet-3.0-6.2mdv2008.1.src.rpm

 Mandriva Linux 2008.1/X86_64:
 26ca8beb8ffa8a778e290248221fe204  2008.1/x86_64/lib64wordnet3.0-3.0-6.2mdv2008.1.x86_64.rpm
 5bc62faa924d2b633249ed486e3396df  2008.1/x86_64/lib64wordnet3.0-devel-3.0-6.2mdv2008.1.x86_64.rpm
 ba9444c750762049a65de3c3dd5732af  2008.1/x86_64/wordnet-3.0-6.2mdv2008.1.x86_64.rpm 
 ed24b17d2cfc64cdc814de1114a94f4b  2008.1/SRPMS/wordnet-3.0-6.2mdv2008.1.src.rpm

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver 0x22458A98

 You can view other update advisories for Mandriva Linux at:

 If you want to report vulnerabilities, please contact


 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
< Prev   Next >


Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
FBI Quietly Removes Recommendation To Encrypt Your Phone
And the prize for LEAST SECURE BROWSER goes to ... Chrome!
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2015 Guardian Digital, Inc. All rights reserved.