The Mandriva Security Team published a new security update for Mandriva Linux. Here the announcement:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Advisory MDKA-2007:127
http://www.mandriva.com/security/
_______________________________________________________________________

Package : openssh-askpass-qt
Date : December 11, 2007
Affected: 2007.0, 2007.1, 2008.0
_______________________________________________________________________

Problem Description:

The QT openssh password asking dialog, provided by openssh-askpass-qt
package, would always exit with successful status (0), even when
the user did not press the Ok button. This would, at least, make the
openssh client always allow sharing a connection when ControlMaster
option was set to ask.

This update fixes the issue.
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2007.0:
fddc18f0e7fb2e7ea0e7aa3445a799cc 2007.0/i586/openssh-askpass-qt-0.2-1.1mdv2007.0.i586.rpm
0811895e1da71c99af9121d3e350e447 2007.0/SRPMS/openssh-askpass-qt-0.2-1.1mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
2422d3ec3b4c550cffab5c1e7a8f6230 2007.0/x86_64/openssh-askpass-qt-0.2-1.1mdv2007.0.x86_64.rpm
0811895e1da71c99af9121d3e350e447 2007.0/SRPMS/openssh-askpass-qt-0.2-1.1mdv2007.0.src.rpm

Mandriva Linux 2007.1:
fb325a6bdd604a7a13f53d023587b6ce 2007.1/i586/openssh-askpass-qt-0.2-1.1mdv2007.1.i586.rpm
33c6f1e8f700dbeb71fc6ae9b9b27a1c 2007.1/SRPMS/openssh-askpass-qt-0.2-1.1mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
3fd9fcc0a86c909c2ca254332f6511e8 2007.1/x86_64/openssh-askpass-qt-0.2-1.1mdv2007.1.x86_64.rpm
33c6f1e8f700dbeb71fc6ae9b9b27a1c 2007.1/SRPMS/openssh-askpass-qt-0.2-1.1mdv2007.1.src.rpm

Mandriva Linux 2008.0:
f137ff67a36057d519973628bb1b6efc 2008.0/i586/openssh-askpass-qt-0.2-2.1mdv2008.0.i586.rpm
422abf51f175e6e1a74f6c4da32ea873 2008.0/SRPMS/openssh-askpass-qt-0.2-2.1mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
a688193af5d9ba9bf20d204ff977d482 2008.0/x86_64/openssh-askpass-qt-0.2-2.1mdv2008.0.x86_64.rpm
422abf51f175e6e1a74f6c4da32ea873 2008.0/SRPMS/openssh-askpass-qt-0.2-2.1mdv2008.0.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFHXukTmqjQ0CJFipgRAtEpAJwOH2Nc0vAqa4r1Enc3NvpMA3F7EACfRNYf
QqoFWN8baCquYC7gVhx3ju0=
=iML5
-----END PGP SIGNATURE-----