![bugtraq logo](/images/bugtraq-logo.png)
Bugtraq mailing list archives
[slackware-security] xine-lib update (SSA:2004-124-03)
From: Slackware Security Team <security () slackware com>
Date: Mon, 3 May 2004 13:07:44 -0700 (PDT)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] xine-lib update (SSA:2004-124-03) New xine-lib packages are available for Slackware 9.1 and -current to fix a security issue where playing a specially crafted Real RTSP stream could run malicious code as the user playing the stream. More details about this issue may be found in this advisory: http://www.xinehq.de/index.php/security/XSA-2004-3 Here are the details from the Slackware 9.1 ChangeLog: +--------------------------+ Sun May 2 17:16:41 PDT 2004 patches/packages/xine-lib-1rc4-i686-1.tgz: Upgraded to xine-lib-1-rc4. This fixes an exploit possible when playing Real RTSP streams. For more details, see: http://www.xinehq.de/index.php/security/XSA-2004-3 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Updated package for Slackware 9.1: ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/xine-lib-1rc4-i686-1.tgz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/xine-lib-1rc4-i686-1.tgz MD5 signatures: +-------------+ Slackware 9.1 package: 78f2924f19dda0399317fb0eb34dc4da xine-lib-1rc4-i686-1.tgz Slackware -current package: eef1fc39ce6d88cf3b46f57084eb3dc2 xine-lib-1rc4-i686-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg xine-lib-1rc4-i686-1.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security () slackware com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo () slackware com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAlqIsakRjwEAQIjMRAnQVAJ9tTReA9vselspq/oSEg+4HsVS12ACcDO3L 1hf23ZSkHvM+dDmy5I2Pn7E= =prLK -----END PGP SIGNATURE-----
Current thread:
- [slackware-security] xine-lib update (SSA:2004-124-03) Slackware Security Team (May 03)