This is a maintenance and bugfix release of samba 3.3.x.

Major enhancements in Samba 3.3.9 include:

o Fix trust relationships to windows 2008 (2008 r2) (bug #6711). o Fix file corruption using smbclient with NT4 server (bug #6606). o Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). o Fix SAMR server for Winbind access (bug #6504).

When accounts are created in MDS, the accounts are created with shadowExpire=0 They should be set with shadowExpire=-1, otherwise new accounts will always warn that they are expired when logging in using the account.

This fixes this bug for new accounts created using MDS. It does not fix the problem for existing accounts.

This update ships glibc with fixed preadv/pwritev/fallocate prototypes which are wrong on 32-bit architectures with
-D_FILE_OFFSET_BITS=64 on glibc 2.10.1. After installing the update, you must rebuild any application using preadv/pwritev/fallocate built with -D_FILE_OFFSET_BITS=64 on a 32-bit arch.

The x86_64 and i586 development packages had conflicting files and weren't installable in parallel. This update modifies the installation of the conflicting files.

A compilation problem made urlview crash when opening the wanted url.
This update fixes the problem.

This update fixes several issues with mdkapplet:

- it fixes adding the Restricted media (bug #55320) - it fixes a rare crash (bug #55346) - it forces applying the updates before offering to upgrade to a newer distro - it fixes a crash while upgrading older distributions when perl has been upgraded to a newer version(bug #55090)

This is a bugfix and maintenance release for php that upgrades php to 5.3.1RC3 and fixes some bugs:

- fix #54993 - With latest php-5.3.xx, it's not needed to build a separate binary for FastCGI SAPI support, this is always enabled in the php-cgi binary. This obsoletes the php-fcgi package and also adds a copy of php.ini as /etc/php-cgi-fcgi.ini to be able to have a separate configuration.

- fix #55063 - Calling utf8_encode or utf8_decode functions stalls PHP, there was a missing dependency on php-xml that is now fixed.

Additionally, some packages which require so, have been rebuilt and are being provided as updates.

This update updates Midnight Commander to latest version, which fixes occasional crashes when searching within editor/browser.

This update provides the missing read-netprofile command for netprofile application, which was required for on-boot network profile selection.

Some Qt softwares like Opera have some CPU issues with Qt4 version released on mandriva 2010.0 This update fixes this issues.

This update fixes the index page css and images when in disconnected mode.

Sound events for Ia_Ora sound theme were not disabled by default for some actions. This package fixes this issue and ensure OpenOffice entries are in the correct order in Office menu in desktop environments.

This is a maintenance and bugfix update for firefox 3.5.x:

* Bug 468562 - ASSERTION: Inserting multiple children without flushing * Bug 521750 - Put a runtime NS_IsMainThread check in nsCycleCollector::Suspect2 and Forget2 * Bug 525326 - Crashes in gif decoder [@ xul.dll@0x348945][@ xul.dll@0x348864][@nsGIFDecoder2::GifWrite(unsigned char const*, unsigned int)] * Bug 525276 - crashes [@ nsDocument::RegisterNamedItems(nsIContent*)] * Bug 524462 - startup crash [@ gfxWindowsFontGroup::WhichFontSupportsChar(nsTArray > const&, unsigned int)]

Additionally, some packages which require so, have been rebuilt and are being provided as updates.

This update provides updated translation files for msec shipped with Mandriva Linux 2010.0

This update fixes an issue in mdkapplet where it offers to upgrade Mandriva 2010.0 to 2009.1 when the former is not listed on api.mdv.com (bug #55017)

The Openchrome driver had an issue where it could cause errors in the PCI bus after returning from DPMS, which could lead to errors in other devices. This new openchrome driver version fixes this problem, so it doesn't interfere with the other PCI devices anymore.

The script mandriva-setup-keyboard, used to set the xkb options on HAL devices, did not set xkb.model. This would case Brazillian ABNT2 keyboards to output the wrong character for the keypad dot key. This update fixes this issue. You may need to restart the service haldaemon or reboot for this change to take effect.

Display keeps sleeping. Settings set not to but within seconds on being idle screen sleeps or hibernates. This update fixes this issue making the users settings about display respected.

updated mdadm packages fix a bug causing raid arrays not being fully assembled at boot.

This update fixes an issue with aria2:

- the default path aria2c uses to look for certificates for public CAs isn't the right one on mandriva systems

This makes the configuration tools use the proper driver for two Matrox cards (bug #53564). It also adds support for ION video card (bug #53515) Last but not least, it defaults to use the nvidia driver instead of the nv one for nVidia Geforce2 MX/MX, thus enabling one to use 3D (bug #53841)

This update fixes several minor issues with draksound:

- it fixes starting firefox for tools help (bug #29775) - it makes tools aware of the snd_ctxfi sound driver - it fixes memory detection in harddrake (bug #50106)

It also enable harddrake not to configure framebuffer and splash removal for OEM.

A higher version of qt4 in 2009.0 updates was preventing a proper upgrade from 2009.0 -> 2009.1. Additional required dependencies is also provided.

In 2009.1, if you launch Firefox remotely via ssh, xdm, or rlogin, the menus are sluggish. When you right click on links, it takes 2-3
*seconds* for the menu to appear. A new libxcb package was build with fixes for this issue, bringing firefox back to it's normal speed when running remotely.

This update resolves a new dependency introduced by okular added with the kde-4.2.x updates.

The silc-toolkit was linked in a wrong way, it depended on symbols no longer exported by libidn. This made it impossible to use the SILC protocol from pidgin. This update changes the linking to use the included IDN resolver instead of libidn.

krandrtray from KDE4 is known to have some issues.

A patch was added that makes krandrtray open its configuration module when the system tray icon is clicked.

Iaora window decoration style has a bug when using compiz, it is noted when a window is maximised, the decoration goes off. You need to restore (unmaximize) to have the decorations back. This update fixes this problem.

A memory allocation bug in gtkmm would make applications using the library crash on the x86_64 architecture. This update corrects the problem.

The synaptics touchpad driver shipped with 2009.1 has problems correctly identifying and scaling the right hand scroll zone on certain hardware (including the ASUS EeePC 701).

This updated version addresses this and several other minor issues.
Fixing (among others) Mandriva bug #51845.

This update fixes a minor issue with urpmi:

- no error message and 0 exit code when using CD/DVD media and hal isn't running

This update fixes three issues with the openchrome driver for VIA video cards.

- Fix a segmentation fault when using the EXA acceleration architecture. - Fix a segmentation fault on hardware that do not support Xv. - Improve EXA performance on a fallback case.

This update fixes an issue with rpm:

o file triggers aren't properly invoked on package removal

The gnome-power-manager package shipped in Mandriva 2009 Spring is not working without the gnome-session running in user's Desktop Environment. This update fixes this issue making gnome-power-manager work fine even if gnome-session is not started.

In mandriva 2009.1 the bluetooth alsa plugins were installed on the root lib dir. This prevent A2DP bluetooth devices from working because they search those libs on the standart lib directory.

Evolution had several bugs like a hanging user interface when dealing with virtual folders that have been fixed in this update.

Update driver to a newer version provided by the video card manufacturer. This new version fixes a system freeze issue.

Latest kaddressbook update package for 2009.1 fails to install due to unresolved gnokii library dependencies. Additionally it was discovered gnokii wasn't rebuilt after the -Werror=format-security change and a patch for this had to be added.

This package update fixes several issues when using speedboot mode in conjunction with failsafe mode, crypted filesystem, network profiles.
It also improves readahead behaviour and reduce startup boot time.
System installed from One edition will now have speedboot enabled.

Bugs fixed : - Only enable CRDA domain if wireless cards are present (Mdv bug #51795) - readahead calls are now blocking and done earlier, for better performance (Mdv bug #44471) - disable speedboot if netprofiles are detected and not selected in kernel cmdline (Mdv bug #51550) - disable speedboot at each boot when /etc/crypttab is detected (Mdv bug #51518) - Fix speedboot status staying at STANDARD BOOT (Mdv bug #50238) - disable speedboot in failsafe mode (Mdv bug #51706) - disable speedboot only when LVM / RAID volumes are detected (Mdv bug #50270) - installing quota no longer disables speedboot (Mdv bug #50270) - hide error when readahead_later list isn't available (Mdv bug #51365)

This update of the IaOra theme for KDE4 contains several bugfixes, including: - check boxes are not visible (#50260) - arabic text overlaps in KDE 4.2 menus (#50993)

This update fixes a number of issues with msec shipped with Mandriva Linux 2009.1: - Msec would send an error message when desktop notification support (NOTIFY_WARN) was not found in the security configuration file (#51364, #51464) - In some locales, msec would show an error message or incorrectly translated messages when running in console (#50869) This update also adds updated translation files for msec.

Mandriva Linux 2009 Spring was released with KDE4 version 4.2.2.

This update upgrades KDE4 in Mandriva Linux 2009 Spring to version 4.2.4, which brings many bugfixes and overall improvements.

Multiple bugs has been identified and corrected in pulseaudio:

- alsa: allow configuration of fallback device strings in profiles util: if NULL is passed to pa_path_get_filename() just hand it through alsa: don't hit an assert when invalid module arguments are passed - alsa: fix wording, we are speaking of card profiles, not output profiles - alsa: initialize buffer size before number of periods to improve compat with some backends - conf: remove obsolete module-idle-time directive from default config file/man page - core:
make sure soft mute status stays in sync with hw mute status endian:
fix LE/BE order for 24 bit accessor functions - log: print file name only when we have it - man: document 24bit sample types in man page - man: document log related daemon.conf options - man: document that tsched doesn't use fragment settings - mutex: when we fail to fill in mutex into static mutex ptr free it again - oss: don't deadlock when we try to resume an OSS device that lacks a mixer - simple-protocol:
don't hit an assert when we call connection_unlink() early - idxset:
add enumeration macro PA_IDXSET_FOREACH - rescue-streams: when one stream move fails try to continue with the remaining ones - sample:
correctly pass s24-32 formats - sample-util: fix iteration loop when adjusting volume of s24 samples - sample-util: properly allocate silence block for s24-32 formats - sconv: fix a few minor conversion issues - alsa: be a bit more verbose when a hwparam call fails - rescue: make we don't end up in an endless loop when we can't move a sink input - core: introduce pa_{sink,source}_set_fixed_latency() - core: cache requested latency only when we are running, not while we are still constructing - sample: fix build on BE archs - alsa:
properly convert return values of snd_strerror() to utf8 - alsa:
remove debug codeAdditional

In addition to these fixes, several patches were recommended by upstream and QAed with help from Mandriva volunteers. These patches are also included.

The Yelp help browser shipped with Mandriva 2009 Spring was built without support for LZMA compression. As this is needed to view the compressed manual and GNU Info pages, LZMA support was enabled in this update.

The Yelp help browser shipped with Mandriva 2009 Spring was built without support for LZMA compression. As this is needed to view the compressed manual and GNU Info pages, LZMA support was enabled in this update.

Update:

On the previous yelp update we added a require on liblzmadec0 for i586 and lib64lzmadec for x86_64.

This fixes the update, which would not work via MandrivaUpdate.

On x86_64, rubygems assumes that the gem installation path is in /usr/lib64/ruby. This is problematic because all of the Mandriva ruby-* packages install their rb files under /usr/lib/ruby regardless of the machine architecture; rubygems consequently cannot find any of the installed gems. This update fixes this issue.

Webkit shipped in 2009.1 has a bug that closes The Gimp help-browser plugin, this update fixes this issue.

The logcheck package shipped in mandriva 2009.1 had two issues, preventing it to run properly:

- its configuration directory (/etc/logcheck) is not readable with the identity used for running logcheck

- it uses run-parts utility with unsupported --list option

This update fixes a minor issue with rpm:

- mdvsys mass-update can segfault when parsing the %apply_patches macros through librpm (bug #50579)

Due to a interface change in version 1.2 of the xcb library, programs depending on libx11 would not be able to run without the proper version of that library. But libx11 package did not require this version explicitly allowing that this package to be installed with a wrong version of libxcb. This update fixes this issue.

ID	Name	Severity
47978	MDVA-2009:201 : samba	high
47977	MDVA-2009:200 : mmc-agent	high
47976	MDVA-2009:197 : glibc	high
47975	MDVA-2009:196 : libsndfile	high
47974	MDVA-2009:195 : urlview	high
47973	MDVA-2009:194 : mdkonline	high
47972	MDVA-2009:193 : php	high
47971	MDVA-2009:191 : mc	high
47970	MDVA-2009:190 : netprofile	high
47969	MDVA-2009:189 : qt4	high
47968	MDVA-2009:188 : indexhtml	high
47967	MDVA-2009:187 : desktop-common-data	high
47966	MDVA-2009:186 : firefox	high
47965	MDVA-2009:185 : msec	high
47964	MDVA-2009:184 : mdkonline	high
47963	MDVA-2009:180 : x11-driver-video-openchrome	high
47962	MDVA-2009:178 : xkeyboard-config	high
47961	MDVA-2009:177 : x11-server	high
47960	MDVA-2009:176 : mdadm	high
47959	MDVA-2009:174 : aria2	high
47958	MDVA-2009:173 : ldetect-lst	high
47957	MDVA-2009:172 : drakxtools	high
47956	MDVA-2009:164 : qt4	high
47955	MDVA-2009:163 : libxcb	high
47954	MDVA-2009:162 : qca	high
47953	MDVA-2009:161 : silc-toolkit	high
47952	MDVA-2009:157 : kdebase4-workspace	high
47951	MDVA-2009:153 : kde4-style-iaora	high
47950	MDVA-2009:149 : gtkmm2.4	high
47949	MDVA-2009:145 : x11-driver-input-synaptics	high
47948	MDVA-2009:141 : urpmi	high
47947	MDVA-2009:140 : x11-driver-video-openchrome	high
47946	MDVA-2009:137 : rpm	high
47945	MDVA-2009:132 : gnome-power-manager	high
47944	MDVA-2009:131 : bluez	high
47943	MDVA-2009:130 : evolution	high
47942	MDVA-2009:129 : x11-driver-video-sisimedia	high
47941	MDVA-2009:128 : gnokii	high
47940	MDVA-2009:126 : initscripts	high
47939	MDVA-2009:125 : kde4-style-iaora	high
47938	MDVA-2009:124 : msec	high
47937	MDVA-2009:123 : kde4	high
47936	MDVA-2009:121 : pulseaudio	high
47935	MDVA-2009:119 : yelp	high
47934	MDVA-2009:119-1 : yelp	high
47933	MDVA-2009:117 : ruby-RubyGems	high
47932	MDVA-2009:115 : webkit	high
47931	MDVA-2009:114 : logcheck	high
47930	MDVA-2009:113 : rpm	high
47929	MDVA-2009:108 : libx11	high

Detections

Analytics

Mandriva Local Security Checks Family for Nessus

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high