MDVA-2008:061 : rpmdrake

This update fixes a minor issue in rpmdrake; it prevents crashing if the RPM database is locked when trying to install some packages bug 40244. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenab...

MDVA-2008:153 : phonon

In Mandriva Linux 2009.0, phonon's signal availableAudioCaptureDevicesChanged was not connected, causing the KDE4 desktop to be unable to play OGG files. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2008:045 : drakbt

A bug with drakbt caused it to crash when selecting private torrents. This update corrects the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script wa...

MDVA-2008:103 : pidgin

A protocol change at the ICQ servers made it impossible to connect with Pidgin. This update adapts Pidgin to the new protocol version. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Networ...

MDVA-2009:049 : mdkonline

This update fixes an issue which could cause mdkonline to fail when attempting to setup restricted resources. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDVA-2008:082-1 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

MDVA-2008:116 : initscripts

This update of the drakx-net and initscripts packages improves wireless strength detection and fixes connection with rt61 devices using the rt61pci driver. Such connections used to fail when the wpasupplicant daemon was used. This update makes the network tools force a reassociation when the...

MDVA-2008:080 : gnome-themes-extras

A typo in the Darklooks GTK theme definition file made this theme unusable. This update fixes it. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2008:062 : drakxtools

This update fixes several minor issues: - some GUIes eg: rpmdrake would crash on clicking on the close button while they load bug 35230 - draksec was crashing if the administrator refused to install bug 38911 - localdrake: After changing the localization language from drakconf in a high security...

MDVA-2008:154 : util-linux-ng

Several bugs were found in util-linux-ng package: - Using an offset on loopback device was broken - Creating an encrypted loopback with losetup -e was broken - Using fdisk to modify the partition table of an image file did not write the changes The updated package fixes these issues. %NASLMINLEVE...

MDVA-2008:157 : hplip

It is mandatory to use UTF-8 encoding in communication on newer cups versions. It prevents hplip from working properly in non-UTF-8 environments. The updated packages fix this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a securi...

MDVA-2008:084 : udev

The udev rules for network interfaces used to write persistent settings for hso devices in /etc/udev/rules.d/61-netconfig.rules, which is wrong since their MAC address is random 39977. The udev rules for automatic driver loading used to load video drivers during the dkms service start, which coul...

MDVA-2008:095 : rsh

A bug in the rsh package prevented it from having the alternatives symlinks created if installed via autoinst.cfg.pl. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2009:022 : xkeyboard-config

Wrong directory permissions would prevent the compilation of keyboard mappings. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

Mandriva Linux Security Advisory : sudo (MDVSA-2009:033)

A vulnerability has been identified in sudo which allowed - depending on the sudoers rules - a sudo-user to execute arbitrary shell commands as root CVE-2009-0034. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:057)

A few vulnerabilities were found in Wireshark, that could cause it to crash or consume excessive memory under certain conditions. This update rovides Wireshark 0.99.8 which is not vulnerable to the issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Mandriva Linux Security Advisory : vim (MDVSA-2009:047-1)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Vim working directory CVE-2009-0316. This update...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:215)

A number of vulnerabilities were discovered in Wireshark that could cause it to crash or abort while processing malicious packets CVE-2008-4680, CVE-2008-4681, CVE-2008-4682, CVE-2008-4683, CVE-2008-4684, CVE-2008-4685. This update provides Wireshark 1.0.4, which is not vulnerable to these issues...

Mandriva Linux Security Advisory : nss_ldap (MDVSA-2008:049)

A race condition in nssldap, when used in applications that use pthread and fork after a call to nssldap, does not properly handle the LDAP connection, which might cause nssldap to return the wrong user data to the wrong process, giving one user access to data belonging to another user, in some...

Mandriva Linux Security Advisory : rxvt (MDVSA-2008:161)

A vulnerability in rxvt allowed it to open a terminal on :0 if the environment variable was not set, which could be used by a local user to hijack X11 connections CVE-2008-1142. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...