Segurunça Mandriva

MDVSA-2012:016: glpi

A File Inclusion vulnerability was discovered and corrected in
GLPI. This advisory provides the latest version of GLPI (0.80.7)
that is not vulnerable to this issue.

MDVA-2012:016: mysql

This is a maintenance and bugfix release that upgrades mysql to the
latest 5.5 version which solves numerous upstream bugs.

The updated packages have been upgraded to mysql 5.5.20.

MDVSA-2012:015: wireshark

Multiple file parser and NULL pointer vulnerabilities including a
RLC dissector buffer overflow was found and corrected in Wireshark.

This advisory provides the latest version of Wireshark (1.6.5 )
which is not vulnerable to these issues.

MDVA-2012:015: dkms

The dkms package was still requiring the kernel-devel-latest
package. But since kernel 2.6.39, this latest package is no more used.

This new release removes this old requirement and the dkms package
simply requires kernel-devel package now.

MDVA-2012:014: firefox

This is a maintenance and bugfix release for firefox 10.0 which
utilizes slightlty better compilation optimizarions and fixes a
problem with an empty printer list on Mandriva Linux 2011 (#65237).

MDVSA-2012:014: glpi

A vulnerability has been found and corrected in GLPI:

The autocompletion functionality in GLPI before 0.80.2 does not
blacklist certain username and password fields, which allows remote
attackers to obtain sensitive information via a crafted POST request
(CVE-2011-2720).

This advisory provides the latest version of GLPI (0.80.6) which are
not vulnerable to this issue. Additionally the latest versions of
the corresponding plugins are also being provided.

MDVA-2012:013: kdepim4-runtime

This fix remove rarely used akonadi icon from systray.

MDVA-2012:012: kdegraphics4

Okular currently has two menu entries, one on the Graphics section and
other in the Office section. This update, removes the okular from the
Graphic menu section entry, cleaning up the menu and avoid confusion.

MDVA-2012:011: qt4

The current Mandriva 2011 Qt4 4.7.4 packages don't package qt4
private-headers needed for qt-creator update. This update adds
this missing package so other updates that requires it can be done
in future.

MDVA-2012:010: libmsn

The include xmlParser.h is missing in default libmsn-devel
installation, this causes trouble wen building other kde packages. This
update adds this missing include.