MDKA-2006:065 : hal

A bug in partition detection for some SD/MMC card readers those using the sdhci driver was preventing correct detection by HAL, breaking automatic mounting/unmounting on card insertion/removal. Another bug was preventing correct mounting of LUKS-encrypted removable media. This update fixes these...

MDKA-2006:066 : evolution-sharp

The evolution-sharp bindings weren't configured properly, preventing beagle from indexing Evolution mailboxes. This update fixes this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable...

MDKA-2006:038 : squid

This update fixes a problem in the squid package as shipped for Mandriva Linux 2007 which affects only the x8664 architecture. On that platform, squid would not start, giving the following message: FATAL: Bungled Default Configuration line 44: hostsfile This has been fixed in the updated packages...

MDKA-2006:002 : mdkonline

A bug in the mdkupdate cron job when automatic update mode is enabled prevents $ENVUSER from being defined, which kills mdkupdate before performing the updates. The mdkapplet GUI is now refreshed and doesn't stall anymore when waiting for configuration or installation operations to finish prior t...

MDKA-2006:024 : gzip

The zgrep wrapper script does not correctly pass all available options that grep accepts to the grep binary. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disable...

MDKA-2004:034 : rpmdrake

When rpmdrake would come across a package name containing the string '-h' it would print out the help usage instead of installing or upgrading a package. The updated packages fix this. It is recommended that all users upgrade immediately. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

MDKA-2006:001 : nss_ldap

A bug was discovered in nssldap when a group has a large number of members. This was resulting in SIGABRT of 'ls -la' when attempting to add additional users to the group. Updated packages have been patched to correct the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

MDKA-2006:027 : xorg-x11

A misapplied patch in a recent X.org updated caused keyboard layout problems which resulted in some users being unable to use the CTRL-ALT-function key combination to switch to a console, as well as other keyboard mapping issues. Updated packages have been re-patched to correct these issues...

MDKA-2005:051 : e2fsprogs

The mklost+found program was segfaulting on Mandriva Linux 2006. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDKA-2007:002 : kdeutils

A bug in the kdeutils-ark package prevented the creation of a zip format archive using Konqueror, or from ark directly. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

MDKA-2005:048 : mdkonline

Updated mdkonline packages are now available that change the name of the main binary from MandrakeUpdate to MandrivaUpdate due to Mandriva's name change. As well, this update provides fixes the account creation and authentication based on obsolete architectures versions prior to 2006.0. The user...

Mandrake Linux Security Advisory : koffice (MDKSA-2007:018)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

Mandrake Linux Security Advisory : libsoup (MDKSA-2007:029)

The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values. The updated packages have been patched to correct this issue. %NASLMINLEVEL...

Mandrake Linux Security Advisory : pxelinux (MDKSA-2006:211)

PXELINUX is a PXE bootloader. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities : Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service...

Mandrake Linux Security Advisory : qt (MDKSA-2006:187)

An integer overflow was discovered in the way that Qt handled pixmap images. This flaw could be exploited by a remote attacker in a malicious website that, when viewed by an individual using an application that uses Qt like Konqueror, would cause it to crash or possibly execute arbitrary code wit...

Mandrake Linux Security Advisory : squid (MDKSA-2007:026)

A vulnerability in squid was discovered that could be remotely exploited by using a special ftp:// URL CVE-2007-0247. Another Denial of Service vulnerability was discovered in squid 2.6 that allows remote attackers to crash the server by causing an externalaclqueue overload CVE-2007-0248...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2007:016)

Fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle MITM attacks. The updated packages have been patched to correct th...

Mandrake Linux Security Advisory : libwmf (MDKSA-2007:036)

Buffer overflow in the gdImageStringFTEx function in gdft.c in the GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font. Libwmf uses an embedded copy of the gd...

Mandrake Linux Security Advisory : screen (MDKSA-2006:191)

Multiple unspecified vulnerabilities in the 'utf8 combining characters handling' utf8handlecomb function in encoding.c in screen before 4.0.3 allows user-assisted attackers to cause a denial of service crash or hang via certain UTF8 sequences. Updated packages have been patched to correct this...

Mandrake Linux Security Advisory : ffmpeg (MDKSA-2006:173)

Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in 1 dtsdec.c, 2 vorbis.c, 3 rm.c, 4sierravmd.c, 5 smacker.c, 6 tta.c, 7 4xm.c, 8 alac.c, 9 cook.c,...