THIS THREAD WILL RE-APPEAR EACH TIME THERE WILL BE NEW UPDATES

New updates for Mandrake 9.1 are from May 16 on the mirrors total 15 MB :

cdrecord
cdrecord cdda2wav
drakxtools
drakxtools newt
harddrake
harddrake ui
mkisofs
xinetd


Bruno

How to get the updates:
In the Mandrake Control Center you go to Software management, then Mandrake Update ( first icon second line ). It will present you a list of update-mirrors first, pick a mirror and it will get the update-list from the ftp-site, this will take a while. When finished it will present you the packages. You will need all those packages because the list is adapted to your configuration. Select a few packages at a time and press OK, it will then download the packages and install them. Then you select the next few etc. tec.
( *apparently the last two US mirrors are the best )

Thanks for the heads up Bruno!!

Thank you, much, Bruno.

Are you still runnig Mandrake as well Quint ?
Can´t keep track of all your installs and what you actualy wiped of you disks !


Bruno

Absolutely. Got a great deal on an 80GB WD hdd, couldn't pass it up; then decided to test as many flavors of Linux as I could, in order to decide which I liked best, in a variety of ways. Still want to try Slackware 9.0, but it's beyond me to set up at this point, and also will be ordering SUSE 8.2 or 8.3, since it appears to be a favorite. Right at this point, Mandrake is my choice, but RedHat and ELX and Knoppix (installed) are very nice, indeed. Guess most important is that I am learning a little, and sure as heck having fun.

You´re quiet a character Quint ! As Far as Slackware 9.0 is concerned: that is not difficult at all, believe me, after all you have managed to do uptill now I´m sure you can handle Slack ! Go on give it a go !
Happy you´re still on Mandrake though, for me it is and stays the favorite, I will keep you all informed about the updates regularly here in this thread, I´ll just dig it up out of the archieves and put it on top of the list again. So then you will know what time it is. Have fun Quint !


Bruno

thanx for the info, getting my updates right now....

mrselfdestruct,

At your service, mrselfdestruct ! We do our best to keep you up to date !


Bruno

AGAIN NEW UPDATES ! May 21 2003

the next packages are waiting for you at your local update-source:
cdrecord 2.0-22
cdrecord-cdda2wav 2.0-22
mkisofs 2.0-22

Total 2 MB

I do know that we did these packages last week too, but these seem to be NEW security updates !


Bruno

Thanks, Bruno...thought it was an instant replay.

NEW UPDATES MAI 28 2003

galeon-1.3.3-2.1mdk
gnupg-1.2.2-1.1mdk
libnspr4-1.3.1-4.1mdk
libnss3-1.3.1-4.1mdk
lsb-1.3.6.1mdk
mozilla-1.3.1-4.1mdk
mozilla-mal-1.3.1-4.1mdk

Total 57 MB


( I´m getting some errors with the mozilla packages, maybe wait a day or to, then it will be O.K. )


Bruno

Thanks for that, Bruno.

AGAIN NEW UPDATES ! - May 31 2003

Yes, the next packages are waiting for you at your local update-source:
cups-1.1.19-1.1mdk
cups-common-1.1.19-1.1mdk
libcubs-1.1.19-1.1mdk

Get updated !


Bruno

NEW UPDATES JUNE 10 2003

Cups-drivers-1.1-104.2mdk
foomatic-db-3.0-0.beta2.20030403.2.2mdk
foomatic-db-engine-3.0-0.beta2.20030403.2.2mdk
foomatic-filters-3.0-0.beta2.20030403.2.2mdk
ghostscript-7.05-53.2mdk
ghostscript-module-X-7.05-53.2mdk
gimpprint- 4.2.5-18.2mdk
libgimpprint1-4.2.5-18.2mdk
libijs0-0.34-44.2mdk
printer-filters-1.0-104.2mdk
printer-testpages-1.0-104.2mdk
printer-utils-1.0-104.2mdk

Total 73 MB

Get updated ( some mirrors might have them only from tomorrow, most of them have them today )


Bruno

Thanks for that, Bruno...just finished the update.

Thanks for the heads up Bruno.

You´re very welcome Riff, if you run Mandrake, this thread will keep you informed !


Bruno

MandrakeSoft Security Advisory MDKSA-2003:066 : kernel

Package name kernel
Date June 11th, 2003
Advisory ID MDKSA-2003:066
Affected versions 9.1
Synopsis Updated kernel packages fix multiple vulnerabilities


Problem Description

Multiple vulnerabilities were discovered and fixed in the Linux kernel.

* CAN-2003-0001: Multiple ethernet network card drivers do not pad frames with null bytes which allows remote attackers to obtain information from previous packets or kernel memory by using special malformed packets.

* CAN-2003-0244: The route cache implementation in the 2.4 kernel and the Netfilter IP conntrack module allows remote attackers to cause a Denial of Service (DoS) via CPU consumption due to packets with forged source addresses that cause a large number of hash table collisions related to the PREROUTING chain.

* CAN-2003-0246: The ioperm implementation in 2.4.20 and earlier kernels does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.

* CAN-2003-0247: A vulnerability in the TTY layer of the 2.4 kernel allows attackers to cause a kernel oops resulting in a DoS.

* CAN-2003-0248: The mxcsr code in the 2.4 kernel allows attackers to modify CPU state registers via a malformed address.

As well, a number of bug fixes were made in the 9.1 kernel including:

* Support for more machines that did not work with APIC * Audigy2 support * New/updated modules: prims25, adiusbadsl, thinkpad, ieee1394, orinoco, via-rhine, * Fixed SiS IOAPIC * IRQ balancing has been fixed for SMP * Updates to ext3 * The previous ptrace fix has been redone to work better

MandrakeSoft encourages all users to upgrade to these new kernels. Updated kernels will be available shortly for other supported platforms and architectures.

Full information to be found at this link:
http://www.mandrakesecure.net/en/advisorie...=MDKSA-2003:066

Thanks for the info, Nathan.

Natan,

It is not on all the mirrors yet, people might have to wait a few days if their mirror is not uploaded yet.
Thanks for the info.

More info about kernel upgrades: Please read This


WARNING !!

NOTE: People with a Nvidia kernel should wait for the right nvidia packages, or will lose their 3D support ! See Mike180´s Thread and This one from Havnblast !!!





Bruno

The list of mirrors can be found here. One can either wait till there favorite mirror is updated or select a new one.

________________________________________________________________________

Mandrake Linux Update Advisory ________________________________________________________________________

Package name: qt3
Advisory ID: MDKA-2003:014
Date: June 12th, 2003

Affected versions: 9.1
________________________________________________________________________

Problem Description:

A bug in qt3 would cause a crash when XFree86 did not support render; this update provides a fix for that issue. As well, it provides an improvement in launch speed in qt applications.

Link to the advisory can be found here.

As with all advisories this may not have yet been posted to all mirrors. If your mirror was updated on June 12 or latter it will have the new RPMs.

Mandrakes offical list of mirrors can be found here.

Two updates in this posting.

1. If your a gamer then the ethereal update is of interest to you.

2. Gzip is used by everybody so this one everyone should grab.

First update:
________________________________________________________________________

Mandrake Linux Security Update Advisory ________________________________________________________________________

Package name: ethereal
Advisory ID: MDKSA-2003:067
Date: June 16th, 2003

Affected versions: 9.1
________________________________________________________________________

Problem Description:

Several vulnerabilities in ethereal were discovered by Timo Sirainen. Integer overflows were found in the Mount and PPP dissectors, as well as one-byte buffer overflows in the AIM, GIOP Gryphon, OSPF, PPTP, Quake, Quake2, Quake3, Rsync, SMB, SMPP, and TSP dissectors. These vulnerabilties were corrected in ethereal 0.9.12.

Link to advisory on ethereal is here.
---------------------------------------------------------------------------------------



Second Update:
________________________________________________________________________

Mandrake Linux Security Update Advisory ________________________________________________________________________

Package name: gzip
Advisory ID: MDKSA-2003:068
Date: June 16th, 2003

Affected versions: 8.2, 9.0, 9.1, Corporate Server 2.1,
Multi Network Firewall 8.2 ________________________________________________________________________

Problem Description:

A vulnerability exists in znew, a script included with gzip, that would create temporary files without taking precautions to avoid a symlink attack. Patches have been applied to make use of mktemp to generate unique filenames, and properly make use of noclobber in the script. Likewise, a fix for gzexe which had been applied previously was incomplete. It has been fixed to make full use of mktemp everywhere a temporary file is created.

The znew problem was initially reported by Michal Zalewski and was again reported more recently to Debian by Paul Szabo. ________________________________________________________________________

Full text of this update to be found here.

Patch will only be availible on mirrors updated TODAY (16 Jun 2003)
List of all official mandrake update mirrors is here.

Even the slowest updated mirrors have now: ( discussed by Nathan here above )

gzip-1.2.4a-11.2mdk
libqt3-3.1.1-13.1mdk
libqt3-common-3.1.1-13.1mdk
libqt3-devel-3.1.1-13.1mdk

Total 43 MB


Bruno

MANDRAKE LINUX ADVISORY: BITCHX

"A Denial Of Service (DoS) vulnerability was discovered in
BitchX that would allow a remote attacker to crash BitchX by
changing certain channel modes..."


Before you all start laughing: BitchX is a widely used IRC program that also works in text mode !


Bruno