Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 22948 - media-sound/mikmod
Summary: media-sound/mikmod
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Highest critical (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-06-16 13:27 UTC by Daniel Ahlberg (RETIRED)
Modified: 2003-07-02 14:41 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Ahlberg (RETIRED) gentoo-dev 2003-06-16 13:27:26 UTC
[SECURITY] [DSA-320-1] New mikmod packages fix buffer overflow 
 
From:  
Matt Zimmerman <mdz@debian.org> 
 
 
To:  
bugtraq@securityfocus.com 
 
 
Date:  
Saturday 01.44.39 
 
 
 
Message was signed with unknown key 0x43E25D1E. 
The validity of the signature cannot be verified. 
 
 
-------------------------------------------------------------------------- 
Debian Security Advisory DSA 320-1                     security@debian.org 
http://www.debian.org/security/                             Matt Zimmerman 
June 13th, 2003                         http://www.debian.org/security/faq 
-------------------------------------------------------------------------- 
 
Package        : mikmod 
Vulnerability  : buffer overflow 
Problem-Type   : local 
Debian-specific: no 
CVE Id         : CAN-2003-0427 
 
Ingo Saitz discovered a bug in mikmod whereby a long filename inside 
an archive file can overflow a buffer when the archive is being read 
by mikmod. 
 
For the stable distribution (woody) this problem has been fixed in 
version 3.1.6-4woody3. 
 
For old stable distribution (potato) this problem has been fixed in 
version 3.1.6-2potato3. 
 
For the unstable distribution (sid) this problem is fixed in version 
3.1.6-6. 
 
We recommend that you update your mikmod package.
Comment 1 Daniel Ahlberg (RETIRED) gentoo-dev 2003-07-02 14:41:31 UTC
glsa sent