Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Slackware 11.0: 2006-357-05 Urgent: xine-lib Heap Overflow Resolution

slackware
Calendar Grey December 24, 2006
Scroller Slackware
Updated xine-lib packages for Slackware address significant vulnerabilities such as buffer and heap overflow problems.
New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues

Summary

Here are the details from the Slackware 11.0 ChangeLog: patches/packages/xine-lib-1.1.3-i686-1_slack11.0.tgz: Upgraded to xine-lib-1.1.3 which fixes possible security problems such as a heap overflow in libmms and a buffer overflow in the Real Media input plugin. For more information, see: https://www.cve.org/CVERecord?id=CVE-2006-2200 (* Security fix *)

Topics%20covered

Topics Covered

security advisory buffer overflow critical slackware software fix heap overflow xine-lib

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 9.1: ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/xine-lib-1.1.3-i686-1_slack9.1.tgz
Updated package for Slackware 10.0:
Updated package for Slackware 10.1:
Updated package for Slackware 10.2:
Updated package for Slackware 11.0:

MD5 Signatures

Slackware 9.1 package: fa1687a00ff18aada399ec50da8c9dd6 xine-lib-1.1.3-i686-1_slack9.1.tgz
Slackware 10.0 package: 6ac0c62b486fdd7f306e2f11ae559d4b xine-lib-1.1.3-i686-1_slack10.0.tgz
Slackware 10.1 package: 36ded1ce6911ce49b37b3fb7c579eace xine-lib-1.1.3-i686-1_slack10.1.tgz
Slackware 10.2 package: be29817649ddb9bf902b09824d1ad6ed xine-lib-1.1.3-i686-1_slack10.2.tgz
Slackware 11.0 package: 8276d06c6df229c6b8627ec571f15a37 xine-lib-1.1.3-i686-1_slack11.0.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory buffer overflow critical slackware software fix heap overflow xine-lib

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg xine-lib-1.1.3-i686-1_slack11.0.tgz