Säkerhetsbulletin från Debian

DSA-1102-1 pinball -- formgivningsfel

Rapporterat den:

2006-06-26

Berörda paket:

pinball

Sårbara:

Referenser i säkerhetsdatabaser:

I Mitres CVE-förteckning: CVE-2006-2196.

Ytterligare information:

Steve Kemp från Debians säkerhetsgranskningsprojekt upptäckte att pinball, en flippersimulator, kunde luras att läsa in nivåinsticksprogram från kataloger under användarens kontroll utan att lämna ifrån sig privilegier.

Den gamla stabila utgåvan (Woody) innehåller inte detta paket.

För den stabila utgåvan (Sarge) har detta problem rättats i version 0.3.1-3sarge1.

För den instabila utgåvan (Sid) har detta problem rättats i version 0.3.1-6.

Vi rekommenderar att ni uppgraderar ert pinball-paket.

Rättat i:

Debian GNU/Linux 3.1 (sarge)

Källkod:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1.dsc; http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1.diff.gz; http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1.orig.tar.gz
Arkitekturoberoende komponent:: http://security.debian.org/pool/updates/main/p/pinball/pinball-data_0.3.1-3sarge1_all.deb
Alpha:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_alpha.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_alpha.deb
AMD64:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_amd64.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_amd64.deb
ARM:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_arm.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_arm.deb
Intel IA-32:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_i386.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_i386.deb
Intel IA-64:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_ia64.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_ia64.deb
HPPA:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_hppa.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_hppa.deb
Motorola 680x0:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_m68k.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_m68k.deb
Big endian MIPS:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_mips.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_mips.deb
Little endian MIPS:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_mipsel.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_mipsel.deb
PowerPC:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_powerpc.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_powerpc.deb
IBM S/390:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_s390.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_s390.deb
Sun Sparc:: http://security.debian.org/pool/updates/main/p/pinball/pinball_0.3.1-3sarge1_sparc.deb; http://security.debian.org/pool/updates/main/p/pinball/pinball-dev_0.3.1-3sarge1_sparc.deb

MD5-kontrollsummor för dessa filer finns i originalbulletinen.