Login
Newsletter
Werbung

Sicherheit: Unsichere Verwendung von /tmp in esound
Aktuelle Meldungen Distributionen
Name: Unsichere Verwendung von /tmp in esound
ID:
Distribution: Debian
Plattformen: Keine Angabe
Datum: Di, 10. Oktober 2000, 13:00
Referenzen: Keine Angabe
Applikationen: esound

Originalnachricht

-----BEGIN PGP SIGNED MESSAGE-----


----------------------------------------------------------------------------
Debian Security Advisory security@debian.org
http://www.debian.org/security/ Daniel Jacobowitz
October 8, 2000
----------------------------------------------------------------------------

Package: esound
Vulnerability: Race condition
Debian-specific: no
Vulnerable: no

Linux-Mandrake has recently released a Security Advisory (MDKSA-2000:051)
covering a race condition in the esound. Debian is not affected by this bug;
the bug is specific to the unix domain socket support, which was turned off in
stable (2.2/potato) and unstable (woody) on February 16, 2000. Therefore
neither the current stable or unstable distribution of Debian is vulnerable
to this problem. Debian 2.1 (aka "slink") is also not vulnerable to
this problem;
the version of esound in Debian 2.1 is 0.2.6, which predates the buggy unix
domain
socket code.

More information regarding this bug can be found at:
http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=yes&bug=58054

----------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable updates
Mailing list: debian-security-announce@lists.debian.org

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: noconv

iQCVAwUBOeIUIz5fjwqn/34JAQHsewQAr4NvRrcJRiaLKlKx0nVWEX9/fPkGz+ib
EPem1gZYfb9FEJrV7lNhFTGqjoXfS0ZFryFp3ZfbiBkKOzAcH07QVvUSqqHFegf8
Q42gpppa2KxeP83iNUjQp4aca/VlBEHMH9uRvV9YNbd2TY/79CBoN3yvL+n00a+q
BI9aZn7IotA=
=3IJF
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-security-announce-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung