Gentoo: GLSA-200802-02 High: Doomsday Execution Risks and DoS Threats

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200802-02
                                            https://security.gentoo.org/

  Severity: High
     Title: Doomsday: Multiple vulnerabilities
      Date: February 06, 2008
      Bugs: #190835
        ID: 200802-02


Synopsis
=======
Multiple vulnerabilities in Doomsday might allow remote execution of
arbitrary code or a Denial of Service.

Background
=========
The Doomsday Engine (deng) is a modern gaming engine for popular ID
games like Doom, Heretic and Hexen.

Affected packages
================
    -------------------------------------------------------------------
     Package             /     Vulnerable     /             Unaffected
    -------------------------------------------------------------------
  1  games-fps/doomsday     <= 1.9.0-beta5.2               Vulnerable!
    -------------------------------------------------------------------
     NOTE: Certain packages are still vulnerable. Users should migrate
           to another package if one is available or wait for the
           existing packages to be marked stable by their
           architecture maintainers.
    -------------------------------------------------------------------
    -------------------------------------------------------------------
     NOTE: Packages marked with asterisks require manual intervention!

==========
Luigi Auriemma discovered multiple buffer overflows in the
D_NetPlayerEvent() function, the Msg_Write() function and the
NetSv_Read...
Read the Full Advisory