Package name
pulseaudio
Date
2008-01-25
Advisory ID
MDVSA-2008:027
Affected versions
2008.0 x86_64 , 2008.0 i586 , 2007.1 i586 , 2007.1 x86_64

Problem description

A programming flaw was found in Pulseaudio versions older than 0.9.9,
by which a local user can gain root access, if pulseaudio is installed
as a setuid to root binary, which is the recommended configuration.

The updated packages fix this issue.

Updated packages

2008.0 x86_64

 32b199e39787b69263fb4ad12fc406f2  2008.0/x86_64/lib64pulseaudio0-0.9.6-3.2mdv2008.0.x86_64.rpm
 290bc9b8b5088dc34dcb4bc759de0674  2008.0/x86_64/lib64pulseaudio0-devel-0.9.6-3.2mdv2008.0.x86_64.rpm
 1156bbd6a875bfe3039dd4a4c0bbd7c3  2008.0/x86_64/lib64pulsecore3-0.9.6-3.2mdv2008.0.x86_64.rpm
 2e4058e6aa6b0c87340e71b491f3f494  2008.0/x86_64/pulseaudio-0.9.6-3.2mdv2008.0.x86_64.rpm 
 ec9296a94a1f5ddb68f07e1188ed6fbd  2008.0/SRPMS/pulseaudio-0.9.6-3.2mdv2008.0.src.rpm

2008.0 i586

 47d86f290ace043d9afff832167fd4e9  2008.0/i586/libpulseaudio0-0.9.6-3.2mdv2008.0.i586.rpm
 1b8bdf5f12c0b49700f99fa548af8097  2008.0/i586/libpulseaudio0-devel-0.9.6-3.2mdv2008.0.i586.rpm
 0da7faa98ccb33abf6ab01be9196532a  2008.0/i586/libpulsecore3-0.9.6-3.2mdv2008.0.i586.rpm
 134fdecb71eb1a9486be1fb50f2a9dd1  2008.0/i586/pulseaudio-0.9.6-3.2mdv2008.0.i586.rpm 
 ec9296a94a1f5ddb68f07e1188ed6fbd  2008.0/SRPMS/pulseaudio-0.9.6-3.2mdv2008.0.src.rpm

2007.1 i586

 52f138a98db13ca5eb3d9a37b9b8efe0  2007.1/i586/libpulseaudio0-0.9.5-1.2mdv2007.1.i586.rpm
 f48d1b6b61fa0c52406b76c010604f00  2007.1/i586/libpulseaudio0-devel-0.9.5-1.2mdv2007.1.i586.rpm
 baa1c32f82d6925d3533c4d848fe0785  2007.1/i586/libpulsecore2-0.9.5-1.2mdv2007.1.i586.rpm
 55bbdfcca0c7809ee8a1e0ddf4b6e15d  2007.1/i586/pulseaudio-0.9.5-1.2mdv2007.1.i586.rpm 
 8e833b7c732943d2ef143e35acf2f4e1  2007.1/SRPMS/pulseaudio-0.9.5-1.2mdv2007.1.src.rpm

2007.1 x86_64

 25a669614bfe39badacd0e9c9adaa0ab  2007.1/x86_64/lib64pulseaudio0-0.9.5-1.2mdv2007.1.x86_64.rpm
 f93980d7641d4aafd0f51b83a665d9c3  2007.1/x86_64/lib64pulseaudio0-devel-0.9.5-1.2mdv2007.1.x86_64.rpm
 0f1442574974705cb4508432c5d2a958  2007.1/x86_64/lib64pulsecore2-0.9.5-1.2mdv2007.1.x86_64.rpm
 96f6df3186f6622e68178fc238a8396f  2007.1/x86_64/pulseaudio-0.9.5-1.2mdv2007.1.x86_64.rpm 
 8e833b7c732943d2ef143e35acf2f4e1  2007.1/SRPMS/pulseaudio-0.9.5-1.2mdv2007.1.src.rpm

References