|
SoX WAV File Buffer Overflow Vulnerability
Solution: RedHat has released a Fedora Legacy advisory FLSA:1945 along with fixes for RedHat Linux. Please see the referenced advisory for more information. Conectiva has released advisory CLA-2004:855 and updates to address this issue for Conectiva 8, 9 and 10. Please see the referenced advisory for further details regarding obtaining and applying appropriate updates. RedHat Linux has released advisories FEDORA-2004-235, and FEDORA-2004-244. These advisories provide fixes and further information about the vulnerabilities for Fedora Core 1 and Fedora Core 2. Please see the referenced advisories. Mandrake has released advisory MDKSA-2004:076 along with fixes dealing with this issue. Please see the referenced advisory for more information. RedHat Linux has released advisory RHSA-2004:409-05 for RedHat Enterprise Linux products. Please see the referenced advisory for further information on obtaining fixes. Gentoo Linux has released advisory GLSA 200407-23 to address this issue. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following with superuser privileges: emerge sync emerge -pv ">=media-sound/sox-12.17.4-r2" emerge ">=media-sound/sox-12.17.4-r2" Slackware has released an advisory (SSA:2004-223-03) to address this issue. Please see the referenced advisory for more information. SGI has made available Patch 10095, correcting this vulnerability for systems running SGI Advanced Linux Environment 3: Patch 10095 is available from http://support.sgi.com/ and ftp://patches.sgi.com/support/free/security/patches/ProPack/3/ The individual RPMs from Patch 10095 are available from: ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/SRPMS Debian Linux has released an advisory (DSA 565-1) along with fixes dealing with this issue. Please see the referenced advisory for more information. Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com <mailto:vuldb@securityfocus.com>. SoX SoX 12.17.3
SoX SoX 12.17.4
|
|
 Privacy Statement |
