TITLE:
Debian update for mpg123

SECUNIA ADVISORY ID:
SA20275

VERIFY ADVISORY:
http://secunia.com/advisories/20275/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 3.1
http://secunia.com/product/5307/

DESCRIPTION:
Debian has issued an update for mpg123. This fixes a vulnerability,
which potentially can be exploited by malicious people to compromise
a user's system.

For more information:
SA20240

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1.dsc
Size/MD5 checksum: 751 ba026638de21be9fa5061056bd53a43d
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1.diff.gz
Size/MD5 checksum: 41527 3119adeed1228f6bd10c3f7100a308e0
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r.orig.tar.gz
Size/MD5 checksum: 159028 95df59ad1651dd2346d49fafc83747e7

Alpha architecture:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1_alpha.deb
Size/MD5 checksum: 124974 b9ea8480d28e09e27673072ade3021e3
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123-esd_0.59r-20sarge1_alpha.deb
Size/MD5 checksum: 124814 55e68e2a8a4ad452d9078d26550fcd3b

ARM architecture:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1_arm.deb
Size/MD5 checksum: 102068 82ab3c03fc9256ad5e5049152a8c00fc

Intel IA-32 architecture:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1_i386.deb
Size/MD5 checksum: 87160 a072702eaf20b77fd0438ffeb28eede9
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123-esd_0.59r-20sarge1_i386.deb
Size/MD5 checksum: 87232 54462dbc34ad9fbbfce90fec5608e79f
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123-nas_0.59r-20sarge1_i386.deb
Size/MD5 checksum: 90148 c4d04e08d4326ec2e734675922dd8f61
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123-oss-3dnow_0.59r-20sarge1_i386.deb
Size/MD5 checksum: 90392 e8166266d16a7f503547217a58d871bb
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123-oss-i486_0.59r-20sarge1_i386.deb
Size/MD5 checksum: 93850 e7b3d76e2e011f2f6e70630e0cb15737

HP Precision architecture:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1_hppa.deb
Size/MD5 checksum: 101702 5f04ef0d8a5ae5c30f3acdc0c00b0927

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1_m68k.deb
Size/MD5 checksum: 80232 e81a61a8c84c0a776655501b3cfff93c

PowerPC architecture:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1_powerpc.deb
Size/MD5 checksum: 96536 cf2cf30c6c4d4b912c4585979c823eab
http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123-esd_0.59r-20sarge1_powerpc.deb
Size/MD5 checksum: 98058 04843c3a016782384e2dc5ae987a365d

Sun Sparc architecture:

http://security.debian.org/pool/updates/non-free/m/mpg123/mpg123_0.59r-20sarge1_sparc.deb
Size/MD5 checksum: 91586 3cc30d3290684dbce40e71acec6202ad

-- Debian GNU/Linux unstable alias sid --

Fixed in version 0.59r-22.

ORIGINAL ADVISORY:
http://www.us.debian.org/security/2006/dsa-1074

OTHER REFERENCES:
SA20240:
http://secunia.com/advisories/20240/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------