[Security Announce] [ MDVA-2008:062 ] - Updated drakxtools package fixes various bugs

[news 28]

This is a multi-part message in MIME format...

 

------------=_1210366577-11275-4268

 

 

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

 

_______________________________________________________________________

 

Mandriva Linux Advisory MDVA-2008:062

http://www.mandriva.com/security/

_______________________________________________________________________

 

Package : drakxtools

Date : May 9, 2008

Affected: 2008.0

_______________________________________________________________________

 

Problem Description:

 

This update fixes several minor issues:

 

- some GUIes (eg: rpmdrake) would crash on clicking on the close

button while they load (bug #35230)

 

- draksec was crashing if the administrator refused to install

(bug #38911)

 

- localdrake: After changing the localization language from drakconf

in a high security level, the permissions of /etc/sysconfig/i18n were

changed such that the file was only readable by root. This caused

graphical login via kdm to fail (bug #39027)

_______________________________________________________________________

 

References:

 

http://qa.mandriva.com/show_bug.cgi?id=35230

http://qa.mandriva.com/show_bug.cgi?id=38911

http://qa.mandriva.com/show_bug.cgi?id=39027

_______________________________________________________________________

 

Updated Packages:

 

Mandriva Linux 2008.0:

89dd80bf0332c3013cc30a7c87400a4a 2008.0/i586/drakx-finish-install-10.4.239.5-1.1mdv2008.0.i586.rpm

374218ea01ed2d0649fd1d8c0b751932 2008.0/i586/drakxtools-10.4.239.5-1.1mdv2008.0.i586.rpm

1e1e67440cbbc3cd2e919cae9494ff75 2008.0/i586/drakxtools-backend-10.4.239.5-1.1mdv2008.0.i586.rpm

d996506db94dedecd6d1c74d33e368bf 2008.0/i586/drakxtools-curses-10.4.239.5-1.1mdv2008.0.i586.rpm

9597b5c8a69ad1453216f45197a3acfa 2008.0/i586/drakxtools-http-10.4.239.5-1.1mdv2008.0.i586.rpm

6b69c64a76b84efb7b0a4bf09ab3b26c 2008.0/i586/harddrake-10.4.239.5-1.1mdv2008.0.i586.rpm

7883ab9c9c635a0f437cc001b93d5bcd 2008.0/i586/harddrake-ui-10.4.239.5-1.1mdv2008.0.i586.rpm

02ffbe5559fe628d50bc552a9856006c 2008.0/SRPMS/drakxtools-10.4.239.5-1.1mdv2008.0.src.rpm

 

Mandriva Linux 2008.0/X86_64:

a3d4c227cef47c7461f8efed83868c89 2008.0/x86_64/drakx-finish-install-10.4.239.5-1.1mdv2008.0.x86_64.rpm

e982f0c2d5ca4c560595cc8c2285f403 2008.0/x86_64/drakxtools-10.4.239.5-1.1mdv2008.0.x86_64.rpm

c4bf82472afd3864fb666f032bc5a718 2008.0/x86_64/drakxtools-backend-10.4.239.5-1.1mdv2008.0.x86_64.rpm

dc514e448120e47bc2446c2780158e17 2008.0/x86_64/drakxtools-curses-10.4.239.5-1.1mdv2008.0.x86_64.rpm

14b45a4326e7534d10da5a378f196f73 2008.0/x86_64/drakxtools-http-10.4.239.5-1.1mdv2008.0.x86_64.rpm

0c77037472f3e6cfad593029086ce691 2008.0/x86_64/harddrake-10.4.239.5-1.1mdv2008.0.x86_64.rpm

dd9ce934641583b7f731f1c9e9e35eaa 2008.0/x86_64/harddrake-ui-10.4.239.5-1.1mdv2008.0.x86_64.rpm

02ffbe5559fe628d50bc552a9856006c 2008.0/SRPMS/drakxtools-10.4.239.5-1.1mdv2008.0.src.rpm

_______________________________________________________________________

 

To upgrade automatically use MandrivaUpdate or urpmi. The verification

of md5 checksums and GPG signatures is performed automatically for you.

 

All packages are signed by Mandriva for security. You can obtain the

GPG public key of the Mandriva Security Team by executing:

 

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 

You can view other update advisories for Mandriva Linux at:

 

http://www.mandriva.com/security/advisories

 

If you want to report vulnerabilities, please contact

 

security_(at)_mandriva.com

_______________________________________________________________________

 

Type Bits/KeyID Date User ID

pub 1024D/22458A98 2000-07-10 Mandriva Security Team

 

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.9 (GNU/Linux)

 

iD8DBQFIJI9GmqjQ0CJFipgRAscLAJ0SHZoMBug1yQ+fJYjiPvquh0QZ/ACggf2+

AhHkEeBcaVj/y0MQTc1Zde0=

=JbjH

-----END PGP SIGNATURE-----

 

 

------------=_1210366577-11275-4268

Content-Type: text/plain; name="message-footer.txt"

Content-Disposition: inline; filename="message-footer.txt"

Content-Transfer-Encoding: 8bit

 

To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org

with this subject : unsubscribe security-announce

_______________________________________________________

Want to buy your Pack or Services from Mandriva?

Go to http://www.mandrivastore.com

Join the Club : http://www.mandrivaclub.com

_______________________________________________________

 

------------=_1210366577-11275-4268--