Gentoo Linux Advisories: net-ftp/proftpd, media-video/mplayer

SUMMARY:

ISS X-Force discovered a vulnerability that could be triggered when a specially crafted file is uploaded to a proftpd server.

Read the full advisory at:
http://www.proftpd.org/

SOLUTION:

It is recommended that all Gentoo Linux users who are running net-ftp/proftpd upgrade to proftpd-1.29_rc2 as follows

emerge sync
emerge '>=net-ftp/proftpd-1.2.9_rc2'
emerge clean

SUMMARY:
A remotely exploitable buffer overflow vulnerability was found in MPlayer. A malicious host can craft a harmful ASX header, and trick MPlayer into executing arbitrary code upon parsing that header.

read the full advisory at:
http://www.mplayerhq.hu/homepage/design6/news.html

SOLUTION:

It is recommended that all Gentoo Linux users who are running media-video/mplayer upgrade to mplayer-0.92 as follows

emerge sync
emerge =media-video/mplayer-0.92
emerge clean

Additionally PaX users might want to /sbin/chpax -m /usr/bin/mplayer