I ran my Mandrake Control Center to update and XFree has a new security release.

So I clicked on the XFree86 new version to update, but when I try to update, I get an error conflicting because (I think) the files cannot be overwritten since they are being currently used. So how do I update XFree without it conflicting and overwritting files in use?

what's the error? can't you run the update from the command line?

Rpmdrake can update packages that have "lower" versions running.
Can you post about the conflicting files.
And if you are correct in your assumption, you can (I think):
find out the process number of X
then do CTL-ALT-F2
type kill and the process id
then urpmi xfree86

-or-
type init 3 in another shell (CTL-ALT-F2)
then urpmi xfree86

Doh! I read that the conflict is actually with fglrx something something. It must be related to my ATI video drivers. Does that mean I have to uninstall the video drivers, then update XFree86, then reinstall the drivers? I'm scared to do that.
Is this XFree86 security update necessary?

if that's the conflict, i would say yes, you will most likely have to remake and reinstall the fglrx driver after updating XFree86. fwiw, i haven't been able to get fglrx to install again after updating to the most recent version of xfree a few days ago. but i haven't really messed with it too much (edit: it's probably not an xfree problem), just passing that along though.

I wouldn't be surprised. I know that if I touch my XFree or my ATI drivers, everything becomes a mess. Even something simple like upgrading my ATI driver required me to get new kernel-sources and all that. it was such a pain!!!

I think I'll leave XFree86 alone and wait for Mandrake 10. lol

Micro420, I empathise. I spent an eternity getting my NVidia system AOK on 9.2. I've installed all the updates - even though I had almost none of the issues requiring the updates - EXCEPT for the XFree86. I understand that I'd have to reinstall Nvidia if I did do the XFree updates - which in my case Mandrake Update describes as having bad signatures. It didn't do this when I I used the download edition prior to my present official powerpack disks - it installed and screwed up the whole thing, as in took me back to square one. I'd like to finally start playing with some aspect of my system other than update and urpmi....

The hassle is such that I too would dearly like to forget about these updates: does anyone know HOW crucial they are... what are the real world risks for a standalone PC accessing the internet? As a newbie I have no idea what the official reason for this update - the "multiple vulnerabilities"- amount to...

I was entertained to read elsewhere a response to the suggestion that Mandrake point out that it is necessary to re-install the graphics driver after applying the XFree updates. The response was that there was really no need - it was obvious common sense. Which to the experienced it doubtless is. But Mandrake tries to raise money and to market itself as the most user friendly distro. The one most likely to tempt people away from Mr Gates... if that's any part of your goal you have to spell out things like the need to re-install drivers after an update sitting innocuously inside your apparently idiot friendly GUI update tool....

In reality, the fact of someone accessing a personal linux machine and able to remotely do damage is very rare. Unless you are running a major network server or one that is on the internet such as a web server or other storage box, these critical updates are usually more of a hinderance than a help. I havent installed one update for this reason and I seem to find more errors after installing them.