MDKA-2007:102 : drakxtools

The drakxtools and drakfirsttime packages in the 2008.0 mirror tree were older than those packages provided in the release media. This update syncs the packages with the official versions from the CD/DVD media. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

MDKA-2007:087 : gwenview

Gwenview allows a user to rename images, but as soon as the user does, the selected image file is no longer visible. These updated packages are being provided to correct the issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a securi...

MDKA-2007:121 : foo2zjs

Due to a change of URLs on foo2zjs project, the firmware download for some common printers was failing, when configuring such printers with printerdrake. This update packages fix the issue by updating those URLs. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

MDKA-2007:137 : nss_ldap

This update corrects an issue in nssldap when handling SIGPIPE, which could manifest itself in many different ways in systems running with nssldap installed and configured, such as a simple application silent error to a complete abort. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2007:092 : mc

This update fixes two separate problems in mc. Firstly, translations to several languages may not have been correctly displayed due to an encoding issue. Secondly, files uploaded to certain types of ssh servers via mc's fish protocol were corrupted. %NASLMINLEVEL 999999 @DEPRECATED@ This script h...

MDKA-2007:078 : rpmdrake

The rpmdrake package erronously warned it could not install some packages from a DVD, due to read errors, while it did install them bug 30463. This update fix this issue. Also, this update will make the install/update progress dialog to be closed before displaying errors or .rpmnew files...

MDKA-2007:104 : mandriva-doc

The Mandriva documentation as shipped in Mandriva Linux 2008.0 did not contain the full ptBR translation. This update provides it and some other minor documentation fixes. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDKA-2007:134 : initscripts

This update for initscripts on Mandriva Linux 2008.0 fixes a bug in the setup of the mode of the text console when UTF-8 mode is disabled for the configured locale of the system. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDKA-2007:097 : shared-mime-info

The freedesktop.org MIME type database contains a wrong MIME type for HTML documents. This information is used by GNOME and other desktop environments to identify files and could cause trouble with the beagle desktop search and other applications. This update corrects this issue. %NASLMINLEVEL...

MDKA-2007:125 : ia_ora-gnome

An invalid memory disallocation in the IaOra GTK theme could cause a crash in the GIMP when using the GIMP Small theme. This updated package corrects the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDKA-2007:038 : mandriva-theme

Some background images were not consistent with the final 2007 Spring theme. This update package fixes the Mandriva-1440x900 and Mandriva-Powerpack+-1280x800 background images. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fi...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:131)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.4. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Mandrake Linux Security Advisory : xine-ui (MDKSA-2007:154)

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors. CVE-2007-0254 XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

Mandrake Linux Security Advisory : wpa_supplicant (MDKSA-2007:245)

Stack-based buffer overflow in driverwext.c in wpasupplicant 0.6.0 allows remote attackers to cause a denial of service crash via crafted TSF data. Updated package fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandrake Linux Security Advisory : ktorrent (MDKSA-2007:095)

A directory traversal vulnerability was found in KTorrent prior to 2.1.2, due to an incomplete fix for a prior directory traversal vulnerability that was corrected in version 2.1.2. Previously, KTorrent would only check for the string .., which could permit strings such as ../. Updated packages...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2007:155)

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C...

MDKA-2007:067 : rsh

The rsh-server package contained incorrect PAM authentication configuration files that prevented clients from being able to access the server. The updated package contains corrected versions of these configuration files and allows correct access to the server. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

MDKA-2007:064 : k3b

The k3b packages shipped with Mandriva Linux 2007.1 were unable to locate the sox binary despite it being installed and available. This update fixes this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:157)

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...