LinuxSecurity.com - Security Advisories

The central voice for Linux and Open Source security news.

Mandriva: glpi
LinuxSecurity.com: This is a maintenance and bugfix release that updates glpi to 0.72.3.

Pardus: Qt: Webkit: Multiple Vulnerabilities
LinuxSecurity.com: Description ========== * CVE-2009-3384: Multiple security flaws (integer underflow, invalid pointer dereference, buffer underflow and a denial of service) were found in the way WebKit's FTP parser used to process remote FTP directory listings. If a remote FTP server issued a specially-crafted FTP command, it could lead to disclosure of sensitive information, denial of service (application crash) or, potentially to execution of arbitrary code, once the command was parsed.

Mandriva: perl-URPM
LinuxSecurity.com: perl-URPM can sometimes get confused about which GPG pubkey belong to which media. This update fixes this issue.

Mandriva: SDL_image
LinuxSecurity.com: SDL_image shipped in Mandriva Linux 2010.0 contains a hidden link on libjpeg62, which is incompatible with libjpeg7 shipped in 2010.0. The hidden link will cause downstream applications such as tuxmath unable to launch. This update fixes this issue.

Mandriva: pango
LinuxSecurity.com: A bug in pango was preventing correct location of some glyphs when scaling was in effect. This update fixes this issue and enforce version dependency on cairo, which could cause crashes when upgrading Mandriva Linux distribution to release 2010.0.

Mandriva: kino
LinuxSecurity.com: The version of kino shipped with 2010.0 does not use the soundwrapper system to allow output to legacy OSS sound device in a friendly way (without soundwrapper the first application to use OSS for sound will hog the device and prevent any other apps using sound). This update changes the .desktop file used to launch kino from the menus to ensure that soundwrapper is used. Additionally, this update also provides soundwrapper package in main/updates media, as it is a new dependency required by kino.