Stay Secure with the Latest Linux Advisories

security advisorycriticalslackware

Slackware 9.1: SSA:2004-124-03 Critical: Xine-lib Stream Exploit

New xine-lib packages are available for Slackware 9.1 and -current to fix a security issue where playing a specially crafted Real RTSP stream could run malicious code as the user playing the stream. More details about this issue may be found in this advisory: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] xine-lib update (SSA:2004-124-03) New xine-lib packages are available for Slackware 9.1 and -current to fix a security issue where playing a specially crafted Real RTSP stream could run malicious code as the user playing the stream. More details about this issue may be found in this advisory: http://xinehq.de Here are the details from the Slackware 9.1 ChangeLog: +--------------------------+ Sun May 2 17:16:41 PDT 2004 patches/packages/xine-lib-1rc4-i686-1.tgz: Upgraded to xine-lib-1-rc4. This fixes an exploit possible when playing Real RTSP streams. For more details, see: http://xinehq.de (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Updated package for Slackware 9.1: Updated package for Slackware -current: MD5 signatures: +-------------+ Slackware 9.1 package: 78f2924f19dda0399317fb0eb34dc4da xine-lib-1rc4-i686-1.tgz Slackware -current package: eef1fc39ce6d88cf3b46f57084eb3dc2 xine-lib-1rc4-i686-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg xine-lib-1rc4-i686-1.tgz +-----+ . New xine-lib updates available for Slackware addressing a significant vulnerability associated with Real RTSP streams.. Slackware Security,xine-lib Update,RTSP Stream Exploit. . Severity: Critical. LinuxSecurity.com Team

May 03, 2004 •Critical Slackware