Package name
chbg
Date
2005-02-01
Advisory ID
MDKSA-2005:027
Affected versions
10.0 amd64 , 10.1 i586 , 10.0 i586 , CS3.0 x86_64 , CS3.0 i586 , 10.1 x86_64

Problem description

A vulnerability in chbg was discovered by Danny Lungstrom. A maliciously-crafted configuration/scenario file could overflow a buffer leading to the potential execution of arbitrary code. The updated packages are patched to prevent the problem.

Updated packages

10.0 amd64

 dc64f6024563bf3b798d264e9263dfe2  amd64/10.0/RPMS/chbg-1.5-8.1.100mdk.amd64.rpm
dc4f685d1d45cd2955fe28752561ede0  amd64/10.0/SRPMS/chbg-1.5-8.1.100mdk.src.rpm

10.1 i586

 31fc57a52b23d8cb0392691b10baa1d3  10.1/RPMS/chbg-1.5-8.1.101mdk.i586.rpm
b82eab41d3a1291378c3021b9df0b881  10.1/SRPMS/chbg-1.5-8.1.101mdk.src.rpm

10.0 i586

 ad75998c3c755b53d14e522e11bcdd51  10.0/RPMS/chbg-1.5-8.1.100mdk.i586.rpm
dc4f685d1d45cd2955fe28752561ede0  10.0/SRPMS/chbg-1.5-8.1.100mdk.src.rpm

CS3.0 x86_64

 d1b766e30b125606851bdffc19df67c1  x86_64/corporate/3.0/RPMS/chbg-1.5-8.1.C30mdk.x86_64.rpm
d403782e9889a596d63c08c54515dc6d  x86_64/corporate/3.0/SRPMS/chbg-1.5-8.1.C30mdk.src.rpm

CS3.0 i586

 2342c2c9f3077fb27797d8a581c16ce5  corporate/3.0/RPMS/chbg-1.5-8.1.C30mdk.i586.rpm
d403782e9889a596d63c08c54515dc6d  corporate/3.0/SRPMS/chbg-1.5-8.1.C30mdk.src.rpm

10.1 x86_64

 7f1b1064b15f6ccb63cce6b1210e6166  x86_64/10.1/RPMS/chbg-1.5-8.1.101mdk.x86_64.rpm
b82eab41d3a1291378c3021b9df0b881  x86_64/10.1/SRPMS/chbg-1.5-8.1.101mdk.src.rpm

References