----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
Fedora update for pulseaudio

SECUNIA ADVISORY ID:
SA28623

VERIFY ADVISORY:
http://secunia.com/advisories/28623/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Fedora 8
http://secunia.com/product/16769/
Fedora 7
http://secunia.com/product/15552/

DESCRIPTION:
Fedora has issued an update for pulseaudio. This fixes a security
issue, which can be exploited by malicious, local users to perform
certain actions with escalated privileges.

The security issue is caused due to the pulseaudio daemon failing to
check whether it has successfully dropped its privileges via
"setuid()". This can potentially be exploited to launch the daemon
with root privileges, which may allow the user to perform certain
actions as the root user.

SOLUTION:
Apply updated packages.

-- Fedora 7 --

a82ac0aafb034ea72ea6f767d95e869068a7dcec
pulseaudio-debuginfo-0.9.6-2.fc7.1.ppc64.rpm
e5df07320471a3aa1b53795e95f38b6b06280e96
pulseaudio-utils-0.9.6-2.fc7.1.ppc64.rpm
959a02c90772853b50b2f2d66f8d2f4b946cad3f
pulseaudio-lib-devel-0.9.6-2.fc7.1.ppc64.rpm
44d8914001122a50a8182a2cc12a14063ce62dbc
pulseaudio-lib-zeroconf-0.9.6-2.fc7.1.ppc64.rpm
1c80a6d4ed8ed062313b313d63ec3fb35e3a0a26
pulseaudio-lib-glib2-0.9.6-2.fc7.1.ppc64.rpm
5fa83f0b9b48c891f210a8b39430157e38e8725a
pulseaudio-lib-0.9.6-2.fc7.1.ppc64.rpm
026731b594d5aa6eeab905240771f5a4715a45cc
pulseaudio-devel-0.9.6-2.fc7.1.ppc64.rpm
c29e8b24cd122c29bf6e83b45e96cf32b2400885
pulseaudio-module-gconf-0.9.6-2.fc7.1.ppc64.rpm
846a716ce5ee6941b247e81cf7dde0500d8cc939
pulseaudio-module-jack-0.9.6-2.fc7.1.ppc64.rpm
24a1e71063a18af0363bc85e9bd4320acbc32a1b
pulseaudio-module-zeroconf-0.9.6-2.fc7.1.ppc64.rpm
7edcb81f2db8319226c12748a7c31ef0b01a03a6
pulseaudio-module-x11-0.9.6-2.fc7.1.ppc64.rpm
b11ed71ac2304221625fce3b6045a10c508c8960
pulseaudio-module-lirc-0.9.6-2.fc7.1.ppc64.rpm
399e9fb67de168706028803ec3064d0fb0c91a64
pulseaudio-esound-compat-0.9.6-2.fc7.1.ppc64.rpm
1bf3fb7599f9d955de837d6cb7b44ed9b2de0939
pulseaudio-0.9.6-2.fc7.1.ppc64.rpm
8f757b46682b34f237b88e4dccaf6471727476ae
pulseaudio-debuginfo-0.9.6-2.fc7.1.i386.rpm
75ecd90d0cdb33d7429d7c572c7a2c3faf2e6847
pulseaudio-utils-0.9.6-2.fc7.1.i386.rpm
ad90ab5c3660d13712eb2076a8c35bcbc2207c38
pulseaudio-lib-devel-0.9.6-2.fc7.1.i386.rpm
405596048511c3bdfa74ef56597980cf3ad25818
pulseaudio-lib-zeroconf-0.9.6-2.fc7.1.i386.rpm
cb16d8f8fbca9cd52171c399dd34e21448b1bea1
pulseaudio-lib-glib2-0.9.6-2.fc7.1.i386.rpm
35a0023c33b0ff479fe74b28890abb943b4c6098
pulseaudio-lib-0.9.6-2.fc7.1.i386.rpm
b76133169b4760855f8237284b11da4d833a6c78
pulseaudio-devel-0.9.6-2.fc7.1.i386.rpm
ffc5e178e9a5e68e5a1a259ebd37224be5b8c09b
pulseaudio-module-gconf-0.9.6-2.fc7.1.i386.rpm
eac55d2882d31f928f2511b032aefbf5c4164c4b
pulseaudio-module-jack-0.9.6-2.fc7.1.i386.rpm
8acbe6aff8e83e1f77752f1f832ca7bbb7236154
pulseaudio-module-zeroconf-0.9.6-2.fc7.1.i386.rpm
852c66361d0ebbedb632feff1b32e95e5a094c93
pulseaudio-module-x11-0.9.6-2.fc7.1.i386.rpm
26c15ebe3670d884f956a7eb1c4592f7fe2cde7c
pulseaudio-module-lirc-0.9.6-2.fc7.1.i386.rpm
88e60885f4107fbe03f29deae458c3f185eec72c
pulseaudio-esound-compat-0.9.6-2.fc7.1.i386.rpm
64d36cbc47f7fcf680c8bff905e11051d0c4aaab
pulseaudio-0.9.6-2.fc7.1.i386.rpm
b5b568c27978eafeb3b0441010da1dd9423a5fb5
pulseaudio-debuginfo-0.9.6-2.fc7.1.x86_64.rpm
3a7a9d65cde0babbe23f9a5de7da72962870419c
pulseaudio-utils-0.9.6-2.fc7.1.x86_64.rpm
c391dec1f2e073b38468d4d204e923b37d43860e
pulseaudio-lib-devel-0.9.6-2.fc7.1.x86_64.rpm
fb474df6c2b26641f833e6955743c68795a7547c
pulseaudio-lib-zeroconf-0.9.6-2.fc7.1.x86_64.rpm
e8340445ae1ef570f992c637197257e0a7c18264
pulseaudio-lib-glib2-0.9.6-2.fc7.1.x86_64.rpm
be80702462ad00f5049fe0e00c45ebc13fe34da2
pulseaudio-lib-0.9.6-2.fc7.1.x86_64.rpm
8c3833e5ac2779da87c51e0bd43d7908b3c73e78
pulseaudio-devel-0.9.6-2.fc7.1.x86_64.rpm
0c7404029d47d09232aa08f695293351eba993d8
pulseaudio-module-gconf-0.9.6-2.fc7.1.x86_64.rpm
cc977e92908dbe785802359a78507556e13f62b4
pulseaudio-module-jack-0.9.6-2.fc7.1.x86_64.rpm
b26b5f69b48d930cff16d2cfc22d9ee677da88a3
pulseaudio-module-zeroconf-0.9.6-2.fc7.1.x86_64.rpm
67f9e449d9ea176ab487e45b11dff922139a99dc
pulseaudio-module-x11-0.9.6-2.fc7.1.x86_64.rpm
270ba6f3ad31e4acb72caab504feb29bee9cd048
pulseaudio-module-lirc-0.9.6-2.fc7.1.x86_64.rpm
72a6dd0ce6cccb2f0be965aa0edb84d37bdfdcd2
pulseaudio-esound-compat-0.9.6-2.fc7.1.x86_64.rpm
eb771ca273896dca9aee30be6ed63e2d0d24a6b0
pulseaudio-0.9.6-2.fc7.1.x86_64.rpm
f47087ce3f4e603f3497e66393b542739babe432
pulseaudio-debuginfo-0.9.6-2.fc7.1.ppc.rpm
77b3dfb78fec2e08a245aafd297195e5f12be1db
pulseaudio-utils-0.9.6-2.fc7.1.ppc.rpm
96daa03f9a7a5cc95403fbaedb18b3c147452f4e
pulseaudio-lib-devel-0.9.6-2.fc7.1.ppc.rpm
d9c71004f5c02fdbf0500e2c455eade9902eb72f
pulseaudio-lib-zeroconf-0.9.6-2.fc7.1.ppc.rpm
ceb6ea230683709d1d349b574be8d954d090c0d1
pulseaudio-lib-glib2-0.9.6-2.fc7.1.ppc.rpm
a88e43a89f10ec0abbbac7dfdaec3313ed63f003
pulseaudio-lib-0.9.6-2.fc7.1.ppc.rpm
f028128da03cf1e3afd2ae8d3b882ccd5b106a76
pulseaudio-devel-0.9.6-2.fc7.1.ppc.rpm
40889c8be329e208f0aea9bd921e0724cc6d572a
pulseaudio-module-gconf-0.9.6-2.fc7.1.ppc.rpm
6b66addf7d9a203d9b6f3e43522db570a75c4d29
pulseaudio-module-jack-0.9.6-2.fc7.1.ppc.rpm
a5abd30fd5b7cfbec290f9e886f4d96dbdabb818
pulseaudio-module-zeroconf-0.9.6-2.fc7.1.ppc.rpm
127a68329a907db0afaf03f5b2c6decb5d5c08f0
pulseaudio-module-x11-0.9.6-2.fc7.1.ppc.rpm
bc2f1dddc57c96d3ab38dfe6460b7dc36c06f897
pulseaudio-module-lirc-0.9.6-2.fc7.1.ppc.rpm
4f4ad8fb4d8f024c7c4a7b24a8fe26456283c2c3
pulseaudio-esound-compat-0.9.6-2.fc7.1.ppc.rpm
ee8e32abe50381d3f1d775d67ac70e2acef28975
pulseaudio-0.9.6-2.fc7.1.ppc.rpm
f1f20529c97e6d92b8edf3eb282e1b74855d3c7f
pulseaudio-0.9.6-2.fc7.1.src.rpm

-- Fedora 8 --

f31969a0cffa9ae989a7ec93a56d17833fc057c2
pulseaudio-debuginfo-0.9.8-5.fc8.ppc64.rpm
926743b4d516081d647176c038be7401e7a575d5
pulseaudio-utils-0.9.8-5.fc8.ppc64.rpm
6425ff096dc47142a3805bdd855a4588e7de56f4
pulseaudio-libs-devel-0.9.8-5.fc8.ppc64.rpm
81c25454cf65a772d2a273be85f3ffc1447da854
pulseaudio-libs-zeroconf-0.9.8-5.fc8.ppc64.rpm
5cc2171be5e3f9c3952305159911b5bad2bd6ba9
pulseaudio-libs-glib2-0.9.8-5.fc8.ppc64.rpm
7167075ecebe5d3431bb39902f01a813fcde5c7d
pulseaudio-core-libs-0.9.8-5.fc8.ppc64.rpm
372121744ed8e6268ef22c2c2508150b7849be2d
pulseaudio-libs-0.9.8-5.fc8.ppc64.rpm
f4d083ec216e017d6ad3e0029c5ae0889df7607b
pulseaudio-module-gconf-0.9.8-5.fc8.ppc64.rpm
d4e985a3994c7bd8f2b69e51af4e1370f11f0b8a
pulseaudio-module-jack-0.9.8-5.fc8.ppc64.rpm
5d87db07db6bdee84a07a95aeceb28b2184fab3e
pulseaudio-module-bluetooth-0.9.8-5.fc8.ppc64.rpm
ad920d1dee3b267628b22091f5ce7dad2a4d0a9d
pulseaudio-module-zeroconf-0.9.8-5.fc8.ppc64.rpm
ee655f85c24c22e7a11d5d1c3f32ef78dedb427d
pulseaudio-module-x11-0.9.8-5.fc8.ppc64.rpm
aa90bada6f5d555350f6e7ac7914c016085eb585
pulseaudio-module-lirc-0.9.8-5.fc8.ppc64.rpm
3fbd36be16ab2336afe85fc81f22d70655299360
pulseaudio-esound-compat-0.9.8-5.fc8.ppc64.rpm
33979876acad958db5bdcd09d70071dcbe6aac2e
pulseaudio-0.9.8-5.fc8.ppc64.rpm
2413674a61077b8e3a5e609391bb7942c2dc236a
pulseaudio-debuginfo-0.9.8-5.fc8.i386.rpm
495a4b9056e09ed589326a2975ed3743df63a8b7
pulseaudio-utils-0.9.8-5.fc8.i386.rpm
edbb303367c6062d60c054881b440ea9e5bc0d7d
pulseaudio-libs-devel-0.9.8-5.fc8.i386.rpm
2dcd06a5f3b704a7a78cc2ba4aeb3aa298074563
pulseaudio-libs-zeroconf-0.9.8-5.fc8.i386.rpm
0ba244fb030dd70e33e67a76c3a1e4caea7f79e4
pulseaudio-libs-glib2-0.9.8-5.fc8.i386.rpm
2f211199b9e2aa1fcc39a06e7bc22c3061fd90f0
pulseaudio-core-libs-0.9.8-5.fc8.i386.rpm
b78c67920ea612981827d08a0bf12021f1dd53c1
pulseaudio-libs-0.9.8-5.fc8.i386.rpm
f2ab904977d20dc9981df236bdeaff541f356f6e
pulseaudio-module-gconf-0.9.8-5.fc8.i386.rpm
62ea3c376293d48aa4456f0c873b4cf6d76d87fa
pulseaudio-module-jack-0.9.8-5.fc8.i386.rpm
4ccc9f004fb05987a1122d47231e8fe8394ae361
pulseaudio-module-bluetooth-0.9.8-5.fc8.i386.rpm
34c31cebea7ae2d87a5f903bc575c0fa292c3f3d
pulseaudio-module-zeroconf-0.9.8-5.fc8.i386.rpm
dfd06b12e5facd72865c81627c070a333c587e0e
pulseaudio-module-x11-0.9.8-5.fc8.i386.rpm
0eb7cc6a66073a2a42258b1e5245b25dddceeedd
pulseaudio-module-lirc-0.9.8-5.fc8.i386.rpm
b909a041f99af6e00b627bbb9b5402ee0792f5f5
pulseaudio-esound-compat-0.9.8-5.fc8.i386.rpm
80436cc49caa4d07b8052c2ee4c682e35313b74d
pulseaudio-0.9.8-5.fc8.i386.rpm
3384945164830fa97d71d2c68050147e4e36a34b
pulseaudio-debuginfo-0.9.8-5.fc8.x86_64.rpm
09eecf2b687ff134bb3918f071579b2b2a2aa77c
pulseaudio-module-x11-0.9.8-5.fc8.x86_64.rpm
72fcae79a1c515e62f52e56bb8fb98bac981b697
pulseaudio-libs-zeroconf-0.9.8-5.fc8.x86_64.rpm
74364aaae68c276fcce66ec95bd2e8ad00d1ef13
pulseaudio-core-libs-0.9.8-5.fc8.x86_64.rpm
fbde6ecf1a346cab28cbd308e6c4879dbc0150d1
pulseaudio-0.9.8-5.fc8.x86_64.rpm
c63c49554738106eed7a803ebc612b3f7a6c59a2
pulseaudio-module-lirc-0.9.8-5.fc8.x86_64.rpm
de989708392036b96e8d48d0868b81d744b9402e
pulseaudio-libs-glib2-0.9.8-5.fc8.x86_64.rpm
8a4f096b33ee31007188530dd3a7ff6dd1f2b238
pulseaudio-libs-devel-0.9.8-5.fc8.x86_64.rpm
ce9d7b761a183d7c41191795ba825ff4632d8cf0
pulseaudio-module-bluetooth-0.9.8-5.fc8.x86_64.rpm
c9dfd3a34cb75fe0f364002db3175640b0ccc924
pulseaudio-module-gconf-0.9.8-5.fc8.x86_64.rpm
044aefe0736583cbe60eaf7e17a8644137d76a8e
pulseaudio-esound-compat-0.9.8-5.fc8.x86_64.rpm
bf32a261f573322dc3ca5ad69270f95476379e9b
pulseaudio-module-jack-0.9.8-5.fc8.x86_64.rpm
23697a99b4c69191cc25446136028d7cfc656fef
pulseaudio-utils-0.9.8-5.fc8.x86_64.rpm
90b1bb2748fa73bf03eda9d7d5669aad90043c3a
pulseaudio-libs-0.9.8-5.fc8.x86_64.rpm
be550c9d32fa74b0b03e9a4f8f90e3b662d9557f
pulseaudio-module-zeroconf-0.9.8-5.fc8.x86_64.rpm
e137015330ad3940dc468df5e0a7bffa6a2ba42e
pulseaudio-debuginfo-0.9.8-5.fc8.ppc.rpm
31613b249459634c6101873c41440b2cf436dfc0
pulseaudio-utils-0.9.8-5.fc8.ppc.rpm
141ca86d0aba1b035025675cd3f70c13b2e0a19e
pulseaudio-libs-devel-0.9.8-5.fc8.ppc.rpm
6d3b76576bfe99fced4ed365e429a953bda10079
pulseaudio-libs-zeroconf-0.9.8-5.fc8.ppc.rpm
2be39776ee6f0710f2df90c96d7b22672dc560bb
pulseaudio-libs-glib2-0.9.8-5.fc8.ppc.rpm
dbe3efa2a45e3c1f1cfb82bb2565326c5b397490
pulseaudio-core-libs-0.9.8-5.fc8.ppc.rpm
d907a86917f2138324eaaddbf11a08e8508de90f
pulseaudio-libs-0.9.8-5.fc8.ppc.rpm
8c2ea6faf2e1d30bc352589e84c1f91b342b0e76
pulseaudio-module-gconf-0.9.8-5.fc8.ppc.rpm
b1e8e9b971a4d6ba3928623b7d9e4f2b64be8eec
pulseaudio-module-jack-0.9.8-5.fc8.ppc.rpm
a5e87e0f3da39d761c8129334ab64bb19d464a58
pulseaudio-module-bluetooth-0.9.8-5.fc8.ppc.rpm
86edca265f8caa8a23ac2ae236574874dfbbfda6
pulseaudio-module-zeroconf-0.9.8-5.fc8.ppc.rpm
ef0eedeedfec54631ef8363e98a118713284f207
pulseaudio-module-x11-0.9.8-5.fc8.ppc.rpm
39eb6369faf9ff0491dfa2e175e89e1fd0a71de6
pulseaudio-module-lirc-0.9.8-5.fc8.ppc.rpm
089d618c4b8867f68bec366602aa39d83f75e9d8
pulseaudio-esound-compat-0.9.8-5.fc8.ppc.rpm
edd4ccac5e39dd7dd39ace66bf5188353910b330
pulseaudio-0.9.8-5.fc8.ppc.rpm
5e22bbcfa706c746a6b9136f871a254a318d0558
pulseaudio-0.9.8-5.fc8.src.rpm

PROVIDED AND/OR DISCOVERED BY:
Marcus Meissner, SUSE

ORIGINAL ADVISORY:
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00869.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00852.html

OTHER REFERENCES:
https://bugzilla.novell.com/show_bug.cgi?id=347822

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------