MDKA-2006:065 : hal

A bug in partition detection for some SD/MMC card readers those using the sdhci driver was preventing correct detection by HAL, breaking automatic mounting/unmounting on card insertion/removal. Another bug was preventing correct mounting of LUKS-encrypted removable media. This update fixes these...

MDKA-2004:034 : rpmdrake

When rpmdrake would come across a package name containing the string '-h' it would print out the help usage instead of installing or upgrading a package. The updated packages fix this. It is recommended that all users upgrade immediately. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2006:001 : nss_ldap

A bug was discovered in nssldap when a group has a large number of members. This was resulting in SIGABRT of 'ls -la' when attempting to add additional users to the group. Updated packages have been patched to correct the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

MDKA-2005:048 : mdkonline

Updated mdkonline packages are now available that change the name of the main binary from MandrakeUpdate to MandrivaUpdate due to Mandriva's name change. As well, this update provides fixes the account creation and authentication based on obsolete architectures versions prior to 2006.0. The user...

MDKA-2006:024 : gzip

The zgrep wrapper script does not correctly pass all available options that grep accepts to the grep binary. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disable...

MDKA-2006:030 : imlib2

The tiff loader from imlib2 crashes when processing images on the x8664 platform. This was reported when using digikam on x8664, which uses this loader. Updated packages are provided that correct the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch ...

MDKA-2006:027 : xorg-x11

A misapplied patch in a recent X.org updated caused keyboard layout problems which resulted in some users being unable to use the CTRL-ALT-function key combination to switch to a console, as well as other keyboard mapping issues. Updated packages have been re-patched to correct these issues...

MDKA-2006:043 : subversion

One of subversion's operating modes, svnserve, needs some entries in the /etc/services file. These entries are created during package installation, but under some conditions this procedure fails and /etc/services remains without them. The updated packages correct this issue. %NASLMINLEVEL 999999...

MDKA-2007:002 : kdeutils

A bug in the kdeutils-ark package prevented the creation of a zip format archive using Konqueror, or from ark directly. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDKA-2005:051 : e2fsprogs

The mklost+found program was segfaulting on Mandriva Linux 2006. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDKA-2006:002 : mdkonline

A bug in the mdkupdate cron job when automatic update mode is enabled prevents $ENVUSER from being defined, which kills mdkupdate before performing the updates. The mdkapplet GUI is now refreshed and doesn't stall anymore when waiting for configuration or installation operations to finish prior t...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2007:016)

Fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle MITM attacks. The updated packages have been patched to correct th...

Mandrake Linux Security Advisory : openssh (MDKSA-2006:204)

A vulnerability in the privilege separation functionality in OpenSSH was discovered, caused by an incorrect checking for bad signatures in sshd's privsep monitor. As a result, the monitor and the unprivileged process can get out sync. The OpenSSH team indicated that this bug is not known to be...

Mandrake Linux Security Advisory : doxygen (MDKSA-2006:212)

Doxygen is a documentation system for C, C++ and IDL. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities : Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:031)

Konqueror 3.5.5 does not properly parse HTML comments in title tags, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment, a related issue to CVE-2007-0478. Updated packages have been patch...

Mandrake Linux Security Advisory : gnupg (MDKSA-2006:228)

A 'stack overwrite' vulnerability in GnuPG gpg allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : pam_ldap (MDKSA-2006:201)

Pamldap does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver. This might lead to an...

Mandrake Linux Security Advisory : gzip (MDKSA-2006:167)

NULL Dereference CVE-2006-4334 A stack modification vulnerability where a stack buffer can be modified out of bounds, but not in the traditional stack overrun sense exists in the LZH decompression support of gzip. CVE-2006-4335 A .bss buffer underflow exists in gzip's pack support, where a loop...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2006:198-1)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

Mandrake Linux Security Advisory : avahi (MDKSA-2007:003)

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...