The Mandriva Security Team published a new security update for Mandriva Linux. Here the announcement:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Advisory MDKA-2007:135
http://www.mandriva.com/security/
_______________________________________________________________________

Package : kdetoys
Date : December 31, 2007
Affected: 2008.0
_______________________________________________________________________

Problem Description:

The kweather applet would be available in the applets viewer of the
KDE kicker, despite the kweather application not being installed.
This update corrects the issue.
_______________________________________________________________________

References:

http://qa.mandriva.com/show_bug.cgi?id5327
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2008.0:
c88bc948e7b749d9511e49addcf90530 2008.0/i586/kdetoys-3.5.7-2.2mdv2008.0.i586.rpm
149f98b5177c4feaa67fcf6e14cd4d46 2008.0/i586/kdetoys-kweather-3.5.7-2.2mdv2008.0.i586.rpm
4203cf3803562b3c5e370b5f7bdbfec4 2008.0/i586/libkdetoys1-devel-3.5.7-2.2mdv2008.0.i586.rpm
e8d7c9e3a7843d5ca4e2ac52658bb83f 2008.0/i586/libkdetoys1-kweather-3.5.7-2.2mdv2008.0.i586.rpm
f27246f82f5cd6afe6f6e86b27c8928d 2008.0/SRPMS/kdetoys-3.5.7-2.2mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
a5352b5ba075a622a3405b9cd354fb95 2008.0/x86_64/kdetoys-3.5.7-2.2mdv2008.0.x86_64.rpm
0acd3727745fb42be65af0f7c2f85939 2008.0/x86_64/kdetoys-kweather-3.5.7-2.2mdv2008.0.x86_64.rpm
542814b9c635bf7062ef766981243f02 2008.0/x86_64/lib64kdetoys1-devel-3.5.7-2.2mdv2008.0.x86_64.rpm
7969b4f4bb1c6603207bc33a7c1155fc 2008.0/x86_64/lib64kdetoys1-kweather-3.5.7-2.2mdv2008.0.x86_64.rpm
f27246f82f5cd6afe6f6e86b27c8928d 2008.0/SRPMS/kdetoys-3.5.7-2.2mdv2008.0.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)

iEYEARECAAYFAkd5IIgACgkQmqjQ0CJFipgpIgCg2C51Kl7pdQmWUr57cNFxxQXQ
Q9MAoK1uomifsnlgGsVhqUSX2KTCkvlL
=PtlW
-----END PGP SIGNATURE-----