---------------------------------------------------------------------- Do you need accurate and reliable IDS / IPS / AV detection rules? Get in-depth vulnerability details: http://secunia.com/binary_analysis/sample_analysis/ ---------------------------------------------------------------------- TITLE: Ubuntu update for amarok SECUNIA ADVISORY ID: SA32357 VERIFY ADVISORY: http://secunia.com/advisories/32357/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Ubuntu Linux 8.04 http://secunia.com/advisories/product/18611/ Ubuntu Linux 7.10 http://secunia.com/advisories/product/16251/ DESCRIPTION: Ubuntu has issued an update for amarok. This fixes a vulnerability, which can be exploited by malicious, local users to perform certain actions with escalated privileges. For more information: SA31418 SOLUTION: Apply updated packages. -- Ubuntu 7.10 -- Source archives: http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.7-0ubuntu3.1.diff.gz Size/MD5: 255918 dca8383f9896834f5d8c54d43f6dc853 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.7-0ubuntu3.1.dsc Size/MD5: 1058 d32a20821719c0dfacb5ba8ec075d489 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.7.orig.tar.gz Size/MD5: 16103569 74cd355c6d4838695a8d5b914a5b7d77 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok-xine_1.4.7-0ubuntu3.1_amd64.deb Size/MD5: 62658 45c0cdd1e68c0df745040e6c92200bc6 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.7-0ubuntu3.1_amd64.deb Size/MD5: 10059924 2ab0454733d26e134366636e83607a71 http://security.ubuntu.com/ubuntu/pool/universe/a/amarok/amarok-engines_1.4.7-0ubuntu3.1_amd64.deb Size/MD5: 876 17a40d219de7ed693b1d230b26987602 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok-xine_1.4.7-0ubuntu3.1_i386.deb Size/MD5: 56628 a523fa49bde0b44b8ff82a36acd9fafa http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.7-0ubuntu3.1_i386.deb Size/MD5: 9849030 c5a52dff92e6d187d8593d6570fca417 http://security.ubuntu.com/ubuntu/pool/universe/a/amarok/amarok-engines_1.4.7-0ubuntu3.1_i386.deb Size/MD5: 882 9587a0db89486eab4aa116d29a0c3d65 lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/a/amarok/amarok-xine_1.4.7-0ubuntu3.1_lpia.deb Size/MD5: 56372 d11e1a501e5d89be4bee9334fd5bd8cc http://ports.ubuntu.com/pool/main/a/amarok/amarok_1.4.7-0ubuntu3.1_lpia.deb Size/MD5: 9840212 e378ce3c1f2d7b701e928c238f14513b http://ports.ubuntu.com/pool/universe/a/amarok/amarok-engines_1.4.7-0ubuntu3.1_lpia.deb Size/MD5: 880 bc43c874722611add7610d22b7dfca3f powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok-xine_1.4.7-0ubuntu3.1_powerpc.deb Size/MD5: 62382 a70d875a0d0c181e22013c61ce2d610e http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.7-0ubuntu3.1_powerpc.deb Size/MD5: 10058388 f0960ebb25d725c0fee8c60566e2e87b http://security.ubuntu.com/ubuntu/pool/universe/a/amarok/amarok-engines_1.4.7-0ubuntu3.1_powerpc.deb Size/MD5: 882 0b34c2be0efc3f69a8df7e4c45af6f91 sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok-xine_1.4.7-0ubuntu3.1_sparc.deb Size/MD5: 56964 975d09ca95317c2a598e432fa42a6203 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.7-0ubuntu3.1_sparc.deb Size/MD5: 9940806 2fa016bd8b2632c0d37c79d2679d960c http://security.ubuntu.com/ubuntu/pool/universe/a/amarok/amarok-engines_1.4.7-0ubuntu3.1_sparc.deb Size/MD5: 882 195106c1509ffcb19fd2aadc5e6d198d -- Ubuntu 8.04 LTS -- Source archives: http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.9.1-0ubuntu3.1.diff.gz Size/MD5: 34120 2c031e3190574baeb16b582e7fe38976 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.9.1-0ubuntu3.1.dsc Size/MD5: 1228 3577bdf77bb6c68421d9d5385027ee00 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.9.1.orig.tar.gz Size/MD5: 16055681 a4365f559f0d42a0a09c3e9a17f9a140 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok-xine_1.4.9.1-0ubuntu3.1_amd64.deb Size/MD5: 61968 ae5a016b12762819e66614720e16e8d1 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.9.1-0ubuntu3.1_amd64.deb Size/MD5: 9852594 e90e8b066df459977b24a333ac1180a8 http://security.ubuntu.com/ubuntu/pool/universe/a/amarok/amarok-engines_1.4.9.1-0ubuntu3.1_amd64.deb Size/MD5: 892 8b8a41d47eaad009f3c998e8ffed8588 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok-xine_1.4.9.1-0ubuntu3.1_i386.deb Size/MD5: 55158 94c5c5098ac8bc2387657d5f2a356817 http://security.ubuntu.com/ubuntu/pool/main/a/amarok/amarok_1.4.9.1-0ubuntu3.1_i386.deb Size/MD5: 9612898 d424575a5b2fe32df2d7bf68f7e3dc92 http://security.ubuntu.com/ubuntu/pool/universe/a/amarok/amarok-engines_1.4.9.1-0ubuntu3.1_i386.deb Size/MD5: 894 389f3799120c338a915fde145a9fdd0a lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/a/amarok/amarok-xine_1.4.9.1-0ubuntu3.1_lpia.deb Size/MD5: 55426 12c2f3f742b268bfdce0d0b0924e0b9e http://ports.ubuntu.com/pool/main/a/amarok/amarok_1.4.9.1-0ubuntu3.1_lpia.deb Size/MD5: 9633456 4ecea3bb7e762bc2ac626a301a6e6317 http://ports.ubuntu.com/pool/universe/a/amarok/amarok-engines_1.4.9.1-0ubuntu3.1_lpia.deb Size/MD5: 892 fab140bcaba2326e5c85286d10052ad0 powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/a/amarok/amarok-xine_1.4.9.1-0ubuntu3.1_powerpc.deb Size/MD5: 60482 a55ed07da11d9af83ca402df70c358ce http://ports.ubuntu.com/pool/main/a/amarok/amarok_1.4.9.1-0ubuntu3.1_powerpc.deb Size/MD5: 9813852 50d2c59b2d3d76a5be2fa39febdb486c http://ports.ubuntu.com/pool/universe/a/amarok/amarok-engines_1.4.9.1-0ubuntu3.1_powerpc.deb Size/MD5: 896 90b290b69b1fbfc3ef7d2a3ec1d63f5e sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/a/amarok/amarok-xine_1.4.9.1-0ubuntu3.1_sparc.deb Size/MD5: 55458 68477ffe9fa8ed27ed604f2f96cfafa2 http://ports.ubuntu.com/pool/main/a/amarok/amarok_1.4.9.1-0ubuntu3.1_sparc.deb Size/MD5: 9703360 cc313fc4e1a9ef9fd585241251c29eea http://ports.ubuntu.com/pool/universe/a/amarok/amarok-engines_1.4.9.1-0ubuntu3.1_sparc.deb Size/MD5: 896 67db1063d70af6b8f5f4f1fa1e5c058e ORIGINAL ADVISORY: USN-657-1: http://www.ubuntu.com/usn/usn-657-1 OTHER REFERENCES: SA31418: http://secunia.com/advisories/31418/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------