Gentoo Linux Advisories: mpg123, teapop

Oct 01, 2003, 02:22 (0 Talkback[s])

GENTOO LINUX SECURITY ANNOUNCEMENT 200309-17

DESCRIPTION

mpg123 contains a heap based buffer overflow that would allow an remote attacker to execute arbitrary code on the victims machine.

SOLUTION

it is recommended that all Gentoo Linux users who are running media-sound/mpg123 upgrade to a fixed version.

make sure that the version to be installed is either one of 0.59r-r3 (stable) or 0.59s-r1 (masked).

emerge sync
emerge mpg123 -p
emerge mpg123
emerge clean

GENTOO LINUX SECURITY ANNOUNCEMENT 200309-18

DESCRIPTION

teapop suffers from a sql injection in the postgresql and mysql authentication module.

SOLUTION

it is recommended that all Gentoo Linux users who are running net-mail/teapop upgrade to a fixed version.

make sure that the version to be installed is atleast 0.3.7.

emerge sync
emerge teapop -p
emerge teapop
emerge clean