89760 2003-02-05 17:51 /43 rader/ Daniel Ahlberg <aliz@gentoo.org> Importerad: 2003-02-05 17:51 av Brevbäraren Extern mottagare: bugtraq@securityfocus.com Mottagare: Bugtraq (import) <3396> Ärende: GLSA: bladeenc ------------------------------------------------------------ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-04 - - -------------------------------------------------------------------- PACKAGE : bladeenc SUMMARY : arbitrary code execution DATE : 2003-02-05 12:55 UTC EXPLOIT : local - - -------------------------------------------------------------------- - From advisory: "A wave file let the attacker to execute all the code he want on the victim" Read the full advisory at: http://www.pivx.com/luigi/adv/blade942-adv.txt SOLUTION It is recommended that all Gentoo Linux users who are running media-sound/bladeenc upgrade to bladeenc-0.94.2-r1 as follows: emerge sync emerge -u bladeenc emerge clean - - -------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at www.gentoo.org/~aliz styx@gentoo.org - - -------------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+QQnMfT7nyhUpoZMRAj4gAKCysKGdI94DM7FfPu24xfxjhPPNSgCgowXK b+MxfjWXGIiJs2VVyA848RM= =Z9lw -----END PGP SIGNATURE----- (89760) /Daniel Ahlberg <aliz@gentoo.org>/----------