It was discovered php-xdebug-2.0.5 did not work properly for php-5.3.2. This advisory upgrades php-xdebug to 2.1.0 RC1 which solves this problem.

Espeak as shipped with Mandriva 2010.0 had no support for pulseaudio.
An updated package was provided that added pulseaudio support, but didn't work anymore for systems that had pulseaudio disabled. This update makes espeak work in both scenarios.

Additional packages has been added to this advisory to solve dependency problems.

It was discovered php-eaccelerator-0.9.6 did not work properly with open_basedir for php-5.3.2. This advisory upgrades php-eaccelerator to 0.9.6.1 which solves this problem.

It was discovered php-eaccelerator-0.9.6 did not work properly with open_basedir for php-5.3.2. This advisory upgrades php-eaccelerator to 0.9.6.1 which solves this problem.

Update:

It was discovered php-eaccelerator-0.9.6 did not work properly with open_basedir for php-5.2.13. This advisory upgrades php-eaccelerator to 0.9.6.1 which solves this problem.

The latest update to openssh application caused it to display bogus FAILED status when shutting down or restarting, when no clients are connected to the ssh server. This update fixes this issue.

The find utility in Mandriva Linux 2010.0 could give bogus 'No such file or directory' messages, when run from msec application. This advisory updates the find application to the latest available version, fixing this issue.

The heartbeat package in the 2010.0 release had wrong permissions and ownership for /usr/bin/cl_status this prevented it from working correctly. Also when peers were outdated heartbeat didn't failover gracefully. This update fixes both these issues.

This updates gdcm to version 20.0.14 and corrects some packaging issues that rendered the python interface non functional.

The Gnome Settings Daemon would crash when the multimedia volume keys were used when the mouse pointer is on the secondary screen. This updates gtk+ to a new version that also has fixes for crashes in empathy, eog and other applications.

This updates digikam and all it's dependencies, fixing some bugs, notably #56078, and introducing functionalities and boosting up stability.

mono as shipped with Mandriva 2010.0 was built with wrong compiler optimizations that made some applications freeze. The updated package uses safe compiler flags that prevents the freeze.

In Mandriva Linux 2010.0 some widgets, such as the Opendesktop ones, resulted in plasma crashes.

This update fixes this issue.

Previous version of openbox were incorrectly started by the login windows, causing various settings such as autostart.sh to malfunction.

This updates fixes issues with k3b when ripping CDs with external encoder such as FLAC.

Updated libSDL packages are being provided for Mandriva Linux 2010.0 which fixes random crackling occurring when playing sound in SDL-based applications via PulseAudio.

This update fixes a number of issues in msec: - this update fixes incorrect German localization for msecperms messages (bug #51005) - this update allows to import legacy perm.local permissions configuration file, which could be installed by third-party applications - this update fixes a crash when pam_unix is used together with msec (bug #58018). Note that this configuration is not used by Mandriva Linux usually, but can be employed in some custom environments. - this update adds a IGNORE_PID_CHANGES variable to filter changes in process PIDs when reporting changes in network configuration (bug #56744). To use this functionality, add a IGNORE_PID_CHANGES=yes into /etc/security/msec/security.conf, and changes in listening network ports will be ignored during periodic checks. - this update fixes an issue when chkrootkit results were not properly excluded by the exceptions list (bug #58076)

x11-server contains a memory leak that is triggered when cursors are changed, which might lead to high memory consumption over a long period of time. This update fixes the problem.

It was not possible to load the lirc_atiusb and lirc_bt829 LIRC infrared drivers due to an Unknown symbol error. The updated packages fix this issue.

This update package contains a fix for Philco OEM systems, and does not offer to upgrade them to latest distribution versions.

The LIRC infrared support in xine-ui program didn't work. This update fixes the issue.

Kdevelop provided with Mandriva 2010.0 could crash at startup. This updates kdevelop to it's final version 4.0, fixing the reported bug and adding many new functionalities as you can see on the official kdevelop 4.0 release announcement:
http://www.kdevelop.org/mediawiki/index.php/KDevelop_4/4.0_Release_An nouncement

xvt script was not detecting KDE4 properly and was forking KDE4 terminal, which could break some scripts. This updates fixes this issue and also disable some unwanted sound events when using Firefox 3.6.x under GNOME.

Sane wasn't compiled with V4L (video4linux) support. This packages update fixes this issue.

Additional packages is being provided to satisfy the added dependencies.

gdm was not configuring properly dpi value to use for its graphical greeter, which could lead to unreadable text on HD resolution with some graphical chipset. This package update fixes this issue.

Plymouth verbose mode at shutdown was not displaying logs properly.
This update fixes this issue.

This update fixes an issue with rpm filetriggers : when several file triggers are ran in parallel and try to read from stdin, a pipe filedescriptor leak leads to a deadlock and rpm freezing.

This updates fixes a wrong Obsoletes: tag on netcdf package which would break upgrades to 2010.1.

This is the latest IaOra package, with fixes for some issues:

- ability to align window titles to left (bug #57056) - Date field on kontact calendar - New event is too small #55699 - Two bugs on IaOra colors on lists #56883 and #57079

A change on the youtube web page has stopped the youtube plugin from working. This update adapts totem to these changes.

Update of ldetect-lst to add the support of new Intel GPU: Atom Pineview G, Atom Pineview GM, Intel B43 and Intel Core i3/i5 IGP.
Also update the monitor DB to add two new Samsung SyncMaster devices.

The tcsh package has some broken basic features due to a wrong patch.
In a tcsh shell executing 'echo [1-]' should return 0 and be silent, instead it returns an error message argv: Subscript out of range.
This update fixes this issue.

In mandriva 2010.0, k3b didn't had menu icons on Gnome, LXDE, XFCE menus. This update fixes this issue.

This update provides openoffice.org-voikko package for the last OpenOffice.org 3.1.1 update.

It was discovered that firefox-ext-plasmanotify-0.3.0 did not work with firefox-3.6 (MDVSA-2010:070). This update provides firefox-ext-plasmanotify-0.3.1 that brings it alive again.

The tkcvs package did not work properly with Tk release 8.6 and later. This packages updates fixes this issue and ensure tcl is properly required by tkcvs package.

This update fixes rpmdrake to suggest packages from disabled backports media only when Backports view is used (#40556).

This update fixes rpmdrake behavior when suggesting packages from disabled backports media (#40556).

In mandriva 2010.0 /etc/pam.d/kde was not tagged as a config file so was replaced by a new file on each update.This update fixes this issue.

This packages update fixes several issues in initscripts:

- ensure dm-mod is loading in speedboot mode (Mdv bug #57351) - ensure loadkeys is called in the right order (Mdv bug #57134) - ensure hid is loaded in first pass for speedboot (fix Macbook login)
- remove false check on alsa (Mdv bug #57265) - avoid dmraid error message (Mdv bug #55344)

This update makes the debug package for dbus available to be used by gdb on x86-64 and allows parallel installation of the development packages for both x86 and x86-64 architectures.

In mandriva 2010.0, we provided KDE 4.3.2, this update brings KDE to version 4.3.5, overall, it provides many bug fixes and enhancements.
For a complete list with changes, access the official announcement at http://www.kde.org/announcements/announce-4.3.5.php In addiction we are providing new versions of digikam, k3b and kbluetooth.

In mandriva 2010.0, we provided KDE 4.3.2, this update brings KDE to version 4.3.5, overall, it provides many bug fixes and enhancements.
For a complete list with changes, access the official announcement at http://www.kde.org/announcements/announce-4.3.5.php In addiction we are providing new versions of digikam, k3b and kbluetooth.

Update:

This update also provides new package python-mwclient, required by kde 4.3.5.

The version of PulseAudio shipped with 2010.0 has had numerous bug fixes since it was released. This updates the PulseAudio package to 0.9.21 which contains most of the bug fixes (the package versions from 0.9.17 through 0.9.21 are all considered bugfix updates).
Additional fixes from the upstream stable-queue branch are also included in this package. The fixes include better support for variations in ALSA mixer elements, bluetooth fixes and general stability fixes.

Additionally, the alsa library shipped with 2010.0 had some flaws in the way certain timer events were handled and with how paramaters were set for some input devices (most notably the microphone in some Logitech Web Cams). Fixes for these flaws are also included.

In mandriva 2010.0, there was a missing requires that make impossible to choose a printer though samba. Also, in mandriva 2010.0, the cups service couldn't be started if the user started s-c-p manually. This update fixes these issues.

Updated packages for lvm2 and device mapper correct malfunctioning of dmeventd and errors while creating snapshots and mirrored targets.

This update adds missing header files which are necessary to compile third-party applications based on iptables.

Poppler cairo backend was not handling PDF images prescaling correctly, causing some PDF files (mostly from scanned text) to be unreadable. This updates fixes this issues and includes other stability fixes.

Old version of slib was not compatible with some gnucash features, which could cause crashes in the application. This bugfix update features latest version of slib package and ensure it is correctly registering into guile code repository. Additionally improvements was done for the guile packages which is also provided with this advisory.

Rsnapshot will automatically add --exclude=xxxx to the rsync options for backups of the filesystem on which the snapshot-root is located.
This will be added to the rsync command-line AFTER the rsync_short_args and rsync_long_args, but BEFORE any backup-specific options. This means that the --exclude=xxxx will override whatever backup-specific excludes are defined. This can be a problem if the name of your snapshot-root is something which is common in many file names. This version resolves this problems.

Dhcp-server package shipped with Mandriva Linux 2009.1 and 2010.0 was using incorrect SV_LDAP definitions during the build, which resulted in ldap support being non-functional. This update fixes the issue.

ID	Name	Severity
48131	MDVA-2010:169 : php-xdebug	high
48130	MDVA-2010:168 : espeak	high
48129	MDVA-2010:166 : php-eaccelerator	high
48128	MDVA-2010:166-1 : php-eaccelerator	high
48127	MDVA-2010:162 : openssh	high
48126	MDVA-2010:161 : findutils	high
48125	MDVA-2010:160 : heartbeat	high
48124	MDVA-2010:158 : gdcm	high
48123	MDVA-2010:157 : gtk+2.0	high
48122	MDVA-2010:156 : digikam	high
48121	MDVA-2010:155 : mono	high
48120	MDVA-2010:153 : kdelibs4	high
48119	MDVA-2010:152 : openbox	high
48118	MDVA-2010:150 : k3b	high
48117	MDVA-2010:149 : SDL12	high
48116	MDVA-2010:148 : msec	high
48115	MDVA-2010:147 : x11-server	high
48114	MDVA-2010:145 : lirc	high
48113	MDVA-2010:144 : mdkonline	high
48112	MDVA-2010:143 : xine-ui	high
48111	MDVA-2010:141 : kdevelop4	high
48109	MDVA-2010:135 : desktop-common-data	high
48108	MDVA-2010:134 : sane	high
48107	MDVA-2010:133 : gdm	high
48106	MDVA-2010:132 : plymouth	high
48105	MDVA-2010:130 : rpm	high
48104	MDVA-2010:129 : netcdf	high
48103	MDVA-2010:127 : kde4-style-iaora	high
48102	MDVA-2010:126 : totem	high
48101	MDVA-2010:125 : ldetect-lst	high
48100	MDVA-2010:123 : tcsh	high
48099	MDVA-2010:122 : k3b	high
48098	MDVA-2010:120 : openoffice.org-voikko	high
48097	MDVA-2010:118 : firefox-ext-plasmanotify	high
48096	MDVA-2010:115 : tkcvs	high
48095	MDVA-2010:114 : rpmdrake	high
48094	MDVA-2010:113 : rpmdrake	high
48093	MDVA-2010:112 : kdebase4-workspace	high
48092	MDVA-2010:111 : initscripts	high
48091	MDVA-2010:110 : dbus	high
48090	MDVA-2010:108 : kde4	high
48089	MDVA-2010:108-1 : kde4	high
48088	MDVA-2010:107 : pulseaudio	high
48087	MDVA-2010:106 : system-config-printer	high
48086	MDVA-2010:105 : lvm2	high
48085	MDVA-2010:104 : iptables	high
48084	MDVA-2010:103 : poppler	high
48083	MDVA-2010:091 : slib	high
48082	MDVA-2010:088 : rsnapshot	high
48081	MDVA-2010:085 : dhcp	high

Detections

Analytics

Mandriva Local Security Checks Family for Nessus

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high