Stay Secure with the Latest Linux Advisories

security advisorydenial of servicenormal severity

Gentoo: GLSA-202309-15:03 Moderate: Explorers Internet Disruption Risk

The fixed ebuild proposed in the original version of this Security Advisory did not address all the vulnerabilities of the Pioneers package. All users of the Pioneers package should upgrade to games-board/pioneers-0.11.3-r1. [More...] [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory [ERRATA UPDATE] GLSA 200711-20:04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Pioneers: Multiple Denials of Service Date: November 14, 2007 Updated: November 29, 2007 Bugs: #198807 ID: 200711-20:04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Errata ===== The fixed ebuild proposed in the original version of this Security Advisory did not address all the vulnerabilities of the Pioneers package. All users of the Pioneers package should upgrade to games-board/pioneers-0.11.3-r1. The corrected sections appear below. Synopsis ======= Two Denial of Service vulnerabilities were discovered in Pioneers. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 games-board/pioneers < 0.11.3-r1 > = 0.11.3-r1 Description ========== Roland Clobus discovered that the Pioneers server may free sessions objects while they are still in use, resulting in access to invalid memory zones (CVE-2007-5933). Bas Wijnen discovered an error when closing connections which can lead to a failed assertion (CVE-2007-6010). Resolution ========= All Pioneers users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=games-board/pioneers-0.11.3-r1" References ========= [ 1 ] CVE-2007-5933 https://www.cve.org/CVERecord?id=CVE-2007-5933 [ 2 ] CVE-2007-6010 https://www.cve.org/CVERecord?id=CVE-2007-6010 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200711-20 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2007 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Mozilla - iD8DBQFHTzZsuhJ+ozIKI5gRAnJYAJ9jW6VCcb5CvFI97X2VA7P1d7cBxwCgmQ+d 7f7PJ5k2jxWQP1SJCzhkhTY=IRg0 -----END PGP SIGNATURE----- . Enhance Voyager subscription following the detection of numerous DDoS risks highlighted in the recent cybersecurity patch.. Pioneers Upgrade,Gentoo Advisory,Package Security Issues,Denial Of Service,Ebuild Update. . LinuxSecurity.com Team

Nov 29, 2007 Gentoo