Stay Secure with the Latest Linux Advisories

security advisoryupdatebuffer overflow

Fedora 9: 2009-0715 Critical Advisory for Amarok Buffer Overflow

This build includes a security fix concerning the parsing of malformed Audible digital audio files.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-0715 2009-01-21 20:33:27 --------------------------------------------------------------------------------Name : amarok Product : Fedora 9 Version : 1.4.10 Release : 2.fc9 URL : https://amarok.kde.org/ Summary : Media player Description : Amarok is a multimedia player with: - fresh playlist concept, very fast to use, with drag and drop - plays all formats supported by the various engines - audio effects, like reverb and compressor - compatible with the .m3u and .pls formats for playlists - nice GUI, integrates into the KDE look, but with a unique touch Amarok can use various engines to decode sound : helix and xine. To use the helix engine, you need to install either HelixPlayer or RealPlayer --------------------------------------------------------------------------------Update Information: This build includes a security fix concerning the parsing of malformed Audible digital audio files. --------------------------------------------------------------------------------ChangeLog: * Mon Jan 12 2009 Rex Dieter - 1.4.10-2 - backport security patch * Wed Aug 13 2008 Rex Dieter - 1.4.10-1 - amarok-1.4.10 * Wed Jun 11 2008 Dennis Gilmore - 1.4.9.1-4 - we are building sparc32 as sparcv9 not sparc now fix ifnarch * Fri May 2 2008 Rex Dieter - 1.4.9.1-3 - fix libnjb support (#444940) * Thu May 1 2008 Rex Dieter - 1.4.9.1-2.1 - --with-libvisual fedora-only (epel misses libvisual-plugins) * Thu Apr 17 2008 Rex Dieter - 1.4.9.1-2 - specfile typo (unclosed macro) * Tue Apr 15 2008 Rex Dieter - 1.4.9.1-1 - amarok-1.4.9.1 --------------------------------------------------------------------------------References: [ 1 ] Bug #479560 - amarok: multiple buffer overflows when parsing Audible .aa files https://bugzilla.redhat.com/show_bug.cgi?id=479560 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update amarok' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The latest Amarok patch resolves a critical buffer overflow issue in the processing of Audible files for Fedora 9 users. Keep your system protected!. Amarok Update,Fedora 9 Security Patch,Audio File Security,Bug Fix. . Severity: Critical. LinuxSecurity.com Team

Jan 22, 2009 •Critical Fedora