[Security Announce] [ MDVA-2008:062 ] - Updated drakxtools package fixes various bugs - 05/09/08 11:14 PM
This is a multi-part message in MIME format...
------------=_1210366577-11275-4268
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Advisory MDVA-2008:062
http://www.mandriva.com/security/
_______________________________________________________________________
Package : drakxtools
Date : May 9, 2008
Affected: 2008.0
_______________________________________________________________________
Problem Description:
This update fixes several minor issues:
- some GUIes (eg: rpmdrake) would crash on clicking on the close
button while they load (bug #35230)
- draksec was crashing if the administrator refused to install
(bug #38911)
- localdrake: After changing the localization language from drakconf
in a high security level, the permissions of /etc/sysconfig/i18n were
changed such that the file was only readable by root. This caused
graphical login via kdm to fail (bug #39027)
_______________________________________________________________________
References:
http://qa.mandriva.com/show_bug.cgi?id=35230
http://qa.mandriva.com/show_bug.cgi?id=38911
http://qa.mandriva.com/show_bug.cgi?id=39027
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2008.0:
89dd80bf0332c3013cc30a7c87400a4a 2008.0/i586/drakx-finish-install-10.4.239.5-1.1mdv2008.0.i586.rpm
374218ea01ed2d0649fd1d8c0b751932 2008.0/i586/drakxtools-10.4.239.5-1.1mdv2008.0.i586.rpm
1e1e67440cbbc3cd2e919cae9494ff75 2008.0/i586/drakxtools-backend-10.4.239.5-1.1mdv2008.0.i586.rpm
d996506db94dedecd6d1c74d33e368bf 2008.0/i586/drakxtools-curses-10.4.239.5-1.1mdv2008.0.i586.rpm
9597b5c8a69ad1453216f45197a3acfa 2008.0/i586/drakxtools-http-10.4.239.5-1.1mdv2008.0.i586.rpm
6b69c64a76b84efb7b0a4bf09ab3b26c 2008.0/i586/harddrake-10.4.239.5-1.1mdv2008.0.i586.rpm
7883ab9c9c635a0f437cc001b93d5bcd 2008.0/i586/harddrake-ui-10.4.239.5-1.1mdv2008.0.i586.rpm
02ffbe5559fe628d50bc552a9856006c 2008.0/SRPMS/drakxtools-10.4.239.5-1.1mdv2008.0.src.rpm
Mandriva Linux 2008.0/X86_64:
a3d4c227cef47c7461f8efed83868c89 2008.0/x86_64/drakx-finish-install-10.4.239.5-1.1mdv2008.0.x86_64.rpm
e982f0c2d5ca4c560595cc8c2285f403 2008.0/x86_64/drakxtools-10.4.239.5-1.1mdv2008.0.x86_64.rpm
c4bf82472afd3864fb666f032bc5a718 2008.0/x86_64/drakxtools-backend-10.4.239.5-1.1mdv2008.0.x86_64.rpm
dc514e448120e47bc2446c2780158e17 2008.0/x86_64/drakxtools-curses-10.4.239.5-1.1mdv2008.0.x86_64.rpm
14b45a4326e7534d10da5a378f196f73 2008.0/x86_64/drakxtools-http-10.4.239.5-1.1mdv2008.0.x86_64.rpm
0c77037472f3e6cfad593029086ce691 2008.0/x86_64/harddrake-10.4.239.5-1.1mdv2008.0.x86_64.rpm
dd9ce934641583b7f731f1c9e9e35eaa 2008.0/x86_64/harddrake-ui-10.4.239.5-1.1mdv2008.0.x86_64.rpm
02ffbe5559fe628d50bc552a9856006c 2008.0/SRPMS/drakxtools-10.4.239.5-1.1mdv2008.0.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFIJI9GmqjQ0CJFipgRAscLAJ0SHZoMBug1yQ+fJYjiPvquh0QZ/ACggf2+
AhHkEeBcaVj/y0MQTc1Zde0=
=JbjH
-----END PGP SIGNATURE-----
------------=_1210366577-11275-4268
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________
------------=_1210366577-11275-4268--
------------=_1210366577-11275-4268
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Advisory MDVA-2008:062
http://www.mandriva.com/security/
_______________________________________________________________________
Package : drakxtools
Date : May 9, 2008
Affected: 2008.0
_______________________________________________________________________
Problem Description:
This update fixes several minor issues:
- some GUIes (eg: rpmdrake) would crash on clicking on the close
button while they load (bug #35230)
- draksec was crashing if the administrator refused to install
(bug #38911)
- localdrake: After changing the localization language from drakconf
in a high security level, the permissions of /etc/sysconfig/i18n were
changed such that the file was only readable by root. This caused
graphical login via kdm to fail (bug #39027)
_______________________________________________________________________
References:
http://qa.mandriva.com/show_bug.cgi?id=35230
http://qa.mandriva.com/show_bug.cgi?id=38911
http://qa.mandriva.com/show_bug.cgi?id=39027
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2008.0:
89dd80bf0332c3013cc30a7c87400a4a 2008.0/i586/drakx-finish-install-10.4.239.5-1.1mdv2008.0.i586.rpm
374218ea01ed2d0649fd1d8c0b751932 2008.0/i586/drakxtools-10.4.239.5-1.1mdv2008.0.i586.rpm
1e1e67440cbbc3cd2e919cae9494ff75 2008.0/i586/drakxtools-backend-10.4.239.5-1.1mdv2008.0.i586.rpm
d996506db94dedecd6d1c74d33e368bf 2008.0/i586/drakxtools-curses-10.4.239.5-1.1mdv2008.0.i586.rpm
9597b5c8a69ad1453216f45197a3acfa 2008.0/i586/drakxtools-http-10.4.239.5-1.1mdv2008.0.i586.rpm
6b69c64a76b84efb7b0a4bf09ab3b26c 2008.0/i586/harddrake-10.4.239.5-1.1mdv2008.0.i586.rpm
7883ab9c9c635a0f437cc001b93d5bcd 2008.0/i586/harddrake-ui-10.4.239.5-1.1mdv2008.0.i586.rpm
02ffbe5559fe628d50bc552a9856006c 2008.0/SRPMS/drakxtools-10.4.239.5-1.1mdv2008.0.src.rpm
Mandriva Linux 2008.0/X86_64:
a3d4c227cef47c7461f8efed83868c89 2008.0/x86_64/drakx-finish-install-10.4.239.5-1.1mdv2008.0.x86_64.rpm
e982f0c2d5ca4c560595cc8c2285f403 2008.0/x86_64/drakxtools-10.4.239.5-1.1mdv2008.0.x86_64.rpm
c4bf82472afd3864fb666f032bc5a718 2008.0/x86_64/drakxtools-backend-10.4.239.5-1.1mdv2008.0.x86_64.rpm
dc514e448120e47bc2446c2780158e17 2008.0/x86_64/drakxtools-curses-10.4.239.5-1.1mdv2008.0.x86_64.rpm
14b45a4326e7534d10da5a378f196f73 2008.0/x86_64/drakxtools-http-10.4.239.5-1.1mdv2008.0.x86_64.rpm
0c77037472f3e6cfad593029086ce691 2008.0/x86_64/harddrake-10.4.239.5-1.1mdv2008.0.x86_64.rpm
dd9ce934641583b7f731f1c9e9e35eaa 2008.0/x86_64/harddrake-ui-10.4.239.5-1.1mdv2008.0.x86_64.rpm
02ffbe5559fe628d50bc552a9856006c 2008.0/SRPMS/drakxtools-10.4.239.5-1.1mdv2008.0.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFIJI9GmqjQ0CJFipgRAscLAJ0SHZoMBug1yQ+fJYjiPvquh0QZ/ACggf2+
AhHkEeBcaVj/y0MQTc1Zde0=
=JbjH
-----END PGP SIGNATURE-----
------------=_1210366577-11275-4268
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________
------------=_1210366577-11275-4268--