news 28 Posted April 8, 2009 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] xine-lib (SSA:2009-098-03) New xine-lib packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0385 Here are the details from the Slackware 12.2 ChangeLog: +--------------------------+ patches/packages/xine-lib-1.1.16.3-i486-1_slack12.2.tgz: Upgraded to xine-lib-1.1.16.3. - Fix another possible int overflow in the 4XM demuxer. (ref. TKADV2009-004, CVE-2009-0385) For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0385 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/xine-lib-1.1.16.3-i486-1_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/xine-lib-1.1.16.3-i486-1_slack12.1.tgz Updated package for Slackware 12.2: ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/xine-lib-1.1.16.3-i486-1_slack12.2.tgz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/xine-lib-1.1.16.3-i486-1.tgz MD5 signatures: +-------------+ Slackware 12.0 package: 797ff28685aeb138889692a787e459fd xine-lib-1.1.16.3-i486-1_slack12.0.tgz Slackware 12.1 package: 09f8589fa3140e0f5b599bdef4f01137 xine-lib-1.1.16.3-i486-1_slack12.1.tgz Slackware 12.2 package: 6ff68dd6af43ed7facb3255a8fda96d5 xine-lib-1.1.16.3-i486-1_slack12.2.tgz Slackware -current package: 80128c40bbdd4a90197950412ed00f87 xine-lib-1.1.16.3-i486-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg xine-lib-1.1.16.3-i486-1_slack12.2.tgz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+ Share this post Link to post
