MDVA-2008:197 : mandriva-kde-config

On Mandriva Linux 2009.0, every time a web page was opened under Konqueror, or opened in a new tab, it showed the HTML code in an editor instead of the website. This update makes Konqueror display websites correctly instead of pure HTML code. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been...

MDVA-2008:120 : draksnapshot

This update fixes several minor issues with draksnapshot, such as backups not being completed due to bad permissions. A number of fixes were done to the applet as well, including notifications showing as information instead of warnings. Draksnapshot now no longer auto-disables after configuring,...

MDVA-2008:093 : kdesdk

kdesdk packages in Mandriva Linux 2008 and 2008 Spring had packaging bugs which led to the subversion ioslave to not build and thus not be provided. The updated packages fixed the bugs and provide the subversion access ioslave. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

MDVA-2008:198 : openoffice.org

This update is the Mandriva OpenOffice.org 3.0 stable official release on Mandriva Linux 2009.0 and it holds some of following explained bug fixes related to openoffice.org-3.0-0.rc2.1mdv2009 packages: OpenOffice.org crashes on start up when the user interface is changed to the Greek language, th...

MDVA-2008:138 : mdkonline

The updated mdkonline package improves the upgrade process to Mandriva Linux 2009.0 and includes many other bugfixes and enhancements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Networ...

MDVA-2009:034 : alsa

This update upgrades ALSA packages to version 1.0.18, with minor bug fixes and enhancements, which can be looked in detail at http://www.alsa-project.org/main/index.php/Changesv1.0.18rc3v1.0.18 . Updated libalsa2 also contains fixes affecting, for example, the speaker-testing tool not working...

MDVA-2008:049 : drakxtools

A new version of drakxtools is available that fixes detecting device.map inconsistencies when /boot and / are not on the same physical drive, especially when / is LVM and /boot is not. As well, it fixes an inconsistency in device.map detection when /boot, or /, is on Linux software RAID /dev/mdX...

MDVA-2008:007-1 : e2fsprogs

An incorrect Requires was added to the e2fsprogs package that prevented it from being installed properly on a system with both 32bit and 64bit update media configured. This update corrects the Requires, allowing the package to be installed properly. Update: The Requires that was used on the...

MDVA-2008:141 : mdkonline

This update ensures distribution upgrade notification is not detected in incorrect cases and the distribution upgrade confirmation dialog is not displayed after security updates are applied. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently ...

MDVA-2008:202 : drakx-net

Drakfirewall, as shipped with Mandriva Linux 2009.0, was not able to save the firewall configuration after changing port selection. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2008:191 : enchant

A bug in the enchant spell checker made several applications crash on startup. This update prevents the crashing. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDVA-2008:125 : bash-completion

The bash-completion package shipped in Mandriva Linux 2008 Spring had a problem with scp remote host completion, as reported in bug 42063. The updated package fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:132)

A vulnerability was found in gnome-screensaver prior to 2.22.1 when a remote authentication server was enabled. During a network outage, gnome-screensaver would crash upon an unlock attempt, allowing physically local users to gain access to locked sessions CVE-2008-0887. The updated packages have...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2008:157)

A vulnerability was found in how ffmpeg handled STR file demuxing. If a user were tricked into processing a malicious STR file, a remote attacker could execute arbitrary code with user privileges via applications linked against ffmpeg CVE-2008-3162. The updated packages have been patched to corre...

Mandriva Linux Security Advisory : kdelibs (MDVSA-2008:097)

A vulnerability was found in startkdeinit in KDE 3.5.5 through 3.5.9 where, if it was installed setuid root, it could allow local users to cause a denial of service or possibly execute arbitrary code CVE-2008-1671. By default, startkdeinit is not installed setuid root on Mandriva Linux, however...

Mandriva Linux Security Advisory : mplayer (MDVSA-2008:196)

Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. The updated packages have been patched to fix this issue. %NASLMINLEVEL 70300 C Tenable...

Mandriva Linux Security Advisory : xdg-utils (MDVSA-2008:031)

A vulnerability was found in xdg-open and xdg-email commands, which allows remote attackers to execute arbitrary commands if the user is tricked into trying to open a maliciously crafted URL. The updated packages have been patched to prevent the issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : perl (MDVSA-2008:165)

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack. The updated packages have been patched to fix this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:046-1)

An array index vulnerability found in the FLAC audio demuxer might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow. Although originally an MPlayer issue, it also affects xine-lib due to code similarity. The updated packages have been patch...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:080)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.13. This update provides the latest Firefox to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...