Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryFedoramoderate severityUbuntu 20.04: 2021-f9e577cf85 Low: Media Service Security Update
Security fix for CVE-2015-7543 in arts (the legacy aRts sound server): A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter- process communication (IPC). This update fixes the temporary directory creation to use the safe mkdtemp function instead.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6d473c95ee 2015-12-29 18:54:14.973876 -------------------------------------------------------------------------------- Name : arts Product : Fedora 23 Version : 1.5.10 Release : 30.fc23 URL : https://kde.org/ Summary : aRts (analog realtime synthesizer) - the KDE sound system Description : arts (analog real-time synthesizer) is the sound system of KDE 3. The principle of arts is to create/process sound using small modules which do certain tasks. These may be create a waveform (oscillators), play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the data to the soundcard. By connecting all those small modules together, you can perform complex tasks like simulating a mixer, generating an instrument or things like playing a wave file with some effects. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-7543 in arts (the legacy aRts sound server): A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter- process communication (IPC). This update fixes the temporary directory creation to use the safe mkdtemp function instead. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1280543 - CVE-2015-7543 arts,kdelibs3: Use of mktemp(3) allows attacker to hijack the IPC https://bugzilla.redhat.com/show_bug.cgi?id=1280543 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update arts' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Dec 29, 2015
•Low
Fedora
91
security advisorygentooprivilege escalationGentoo: GLSA-200606-22 High: aRts Privilege Escalation Threat
The artswrapper part of aRts allows local users to execute arbitrary code with elevated privileges.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200606-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: aRts: Privilege escalation Date: June 22, 2006 Bugs: #135970 ID: 200606-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= The artswrapper part of aRts allows local users to execute arbitrary code with elevated privileges. Background ========= aRts is a real time modular system for synthesizing audio used by KDE. artswrapper is a helper application used to start the aRts daemon. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 kde-base/arts < 3.5.2-r1 > = 3.5.2-r1 *> = 3.4.3-r1 Description ========== artswrapper fails to properly check whether it can drop privileges accordingly if setuid() fails due to a user exceeding assigned resource limits. Impact ===== Local attackers could exploit this vulnerability to execute arbitrary code with elevated privileges. Note that the aRts package provided by Gentoo is only vulnerable if the artswrappersuid USE-flag is enabled. Workaround ========= There is no known workaround at this time. Resolution ========= All aRts users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose kde-base/arts References ========= [ 1 ] CVE-2006-2916 https://www.cve.org/CVERecord?id=CVE-2006-2916 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200606-22 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Jun 22, 2006
Gentoo
89
security advisoryfedoracriticalFedora Core 5 Update 2006-711 Critical: arts Audio System Update
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-711 2006-06-19 ---------------------------------------------------------------------Product : Fedora Core 5 Name : arts Version : 1.5.3 Release : 0.1.fc5 Summary : aRts (analog realtime synthesizer) - the KDE sound system Description : arts (analog real-time synthesizer) is the sound system of KDE 3. The principle of arts is to create/process sound using small modules which do certain tasks. These may be create a waveform (oscillators), play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the data to the soundcard. By connecting all those small modules together, you can perform complex tasks like simulating a mixer, generating an instrument or things like playing a wave file with some effects. ---------------------------------------------------------------------Update Information: KDE 3.5.3 release Qt 3.3.6 release ---------------------------------------------------------------------* Thu Jun 1 2006 Than Ngo 8:1.5.3-0.1.fc5 - update to 1.5.3 - own /ust/include/kde #193460 ---------------------------------------------------------------------This update can be downloaded from: 81b50d61741443bed815825ab968354368e46143 SRPMS/arts-1.5.3-0.1.fc5.src.rpm 81b50d61741443bed815825ab968354368e46143 noarch/arts-1.5.3-0.1.fc5.src.rpm 293574ddbc2de0f8e5028e1d294f96ad6ab74c28 ppc/arts-devel-1.5.3-0.1.fc5.ppc.rpm cea6bb88e63619b31aa23875ff55acaff4b8a449 ppc/debug/arts-debuginfo-1.5.3-0.1.fc5.ppc.rpm ad4ad4f44719f5a982cf316c79ae09c20afbea3e ppc/arts-1.5.3-0.1.fc5.ppc.rpm 830c7c9f064dfd46424c3e2b1fac1571d5e6d6b8 x86_64/debug/arts-debuginfo-1.5.3-0.1.fc5.x86_64.rpm 301da35ede62da73296a765b9853717b90e49d4b x86_64/arts-devel-1.5.3-0.1.fc5.x86_64.rpm 720cce2fad3af597f65554e8cffa5e829a4cc335 x86_64/arts-1.5.3-0.1.fc5.x86_64.rpm f91ae89b358e7b877dab8f95dc636a8f013b7bbe i386/arts-devel-1.5.3-0.1.fc5.i386.rpm 87c055e6281b457457bcc4dfd5f160a3d1761d41 i386/debug/arts-debuginfo-1.5.3-0.1.fc5.i386.rpm 4c94ee9a25d05b7d84acbad1408ae463203b27a2 i386/arts-1.5.3-0.1.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ---------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Jun 19, 2006
•Critical
Fedora
89
security advisorymoderateFedora CoreFedora Core 4: 2006-841 Important: Graphics 2.1.0 Video Patch
Update to KDE 3.4.2. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-740 2005-08-15 ---------------------------------------------------------------------Product : Fedora Core 3 Name : arts Version : 1.4.2 Release : 0.fc3.3 Summary : A modularized sound system for KDE. Description : aRts (Analog Real-Time Synthesizer) is a sound system for KDE 2.x. aRts creates and processes sound using small modules that do certain tasks. aRts modules can create waveforms (oscillators), play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the data to the soundcard. By connecting all those small modules together, you can perform complex tasks like simulating a mixer, generating an instrument, or playing a wave file with effects. ---------------------------------------------------------------------Update Information: Update to KDE 3.4.2 ------------------------------------------------------------------------------------------------------------------------------------------This update can be downloaded from: 934d3ce0e0d4e5a5db49997c0453d6de SRPMS/arts-1.4.2-0.fc3.3.src.rpm f4ab0b7bd520e56e4a12e1159c858e3a x86_64/arts-1.4.2-0.fc3.3.x86_64.rpm db1d972d633ae937cf585a38a3071d8a x86_64/arts-devel-1.4.2-0.fc3.3.x86_64.rpm 0ca3993d9d158259c58197cf01deaf7e x86_64/debug/arts-debuginfo-1.4.2-0.fc3.3.x86_64.rpm 65cf9a31526051bae4d75083449161bc x86_64/arts-1.4.2-0.fc3.3.i386.rpm 65cf9a31526051bae4d75083449161bc i386/arts-1.4.2-0.fc3.3.i386.rpm 58e6d3f48637bc4fcc1bc401578eb6b5 i386/arts-devel-1.4.2-0.fc3.3.i386.rpm 78bc40e601a8d39d7aa7b50094e00c48 i386/debug/arts-debuginfo-1.4.2-0.fc3.3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailinglist
Aug 15, 2005
•Important
Fedora
89
security advisoryupdatecriticalFedora: Critical Update 2005-661 for Arts Sound Module Released
KDE 3.4.2 update. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-661 2005-07-29 ---------------------------------------------------------------------Product : Fedora Core 4 Name : arts Version : 1.4.2 Release : 0.fc4.1 Summary : A modularized sound system for KDE. Description : aRts (Analog Real-Time Synthesizer) is a sound system for KDE 2.x. aRts creates and processes sound using small modules that do certain tasks. aRts modules can create waveforms (oscillators), play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the data to the soundcard. By connecting all those small modules together, you can perform complex tasks like simulating a mixer, generating an instrument, or playing a wave file with effects. ---------------------------------------------------------------------Update Information: KDE 3.4.2 update ---------------------------------------------------------------------* Tue Jul 26 2005 Than Ngo 8:1.4.2-0.fc4.1 - update to 1.4.2 ---------------------------------------------------------------------This update can be downloaded from: 7c01a49126243fd0150bcb00eaeeabd6 SRPMS/arts-1.4.2-0.fc4.1.src.rpm 27374ab0697ae201bba9c3bda93e23d6 ppc/arts-1.4.2-0.fc4.1.ppc.rpm df4beb2ffe49fdb30b882ff35ab4eb62 ppc/arts-devel-1.4.2-0.fc4.1.ppc.rpm 446bd35a2b54fa6b15e17e14d1d74a31 ppc/debug/arts-debuginfo-1.4.2-0.fc4.1.ppc.rpm fd463448600bf02bf6c3a3cc6266472e ppc/arts-1.4.2-0.fc4.1.ppc64.rpm 3558c42783a8ea5a6bb6ae25477d6e45 x86_64/arts-1.4.2-0.fc4.1.x86_64.rpm 810912159cbdcba0252f588fce2123d8 x86_64/arts-devel-1.4.2-0.fc4.1.x86_64.rpm 7651e949f11697e4846269fc0fcc907e x86_64/debug/arts-debuginfo-1.4.2-0.fc4.1.x86_64.rpm fe16b944e8348276c13a08517daf8e77 x86_64/arts-1.4.2-0.fc4.1.i386.rpm fe16b944e8348276c13a08517daf8e77 i386/arts-1.4.2-0.fc4.1.i386.rpm 0065e12cda7aa2f5161f3027ac1725bc i386/arts-devel-1.4.2-0.fc4.1.i386.rpm 61c506b4ee65980204297234ae8693d4 i386/debug/arts-debuginfo-1.4.2-0.fc4.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Jul 29, 2005
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!