[SECURITY] Fix unchecked setuid() return values (feisty-security, gutsy)

Bug #185534 reported by Daniel T Chen
262
Affects Status Importance Assigned to Milestone
pulseaudio (Ubuntu)
Fix Released
High
Unassigned
Feisty
Fix Released
High
Unassigned
Gutsy
Fix Released
High
Unassigned

Bug Description

Binary package hint: pulseaudio

PulseAudio in feisty-security and gutsy do not check the return values of set*id(). This is CVE-2008-0008; see also https://bugzilla.novell.com/show_bug.cgi?id=347822 and https://bugzilla.redhat.com/show_bug.cgi?id=425481. Debdiffs for feisty-security and gusty attached separately.

CVE References

Revision history for this message
Daniel T Chen (crimsun) wrote :
Changed in pulseaudio:
importance: Undecided → High
status: New → Triaged
Revision history for this message
Daniel T Chen (crimsun) wrote :
Changed in pulseaudio:
status: Triaged → Fix Released
importance: Undecided → High
status: New → Triaged
importance: Undecided → High
status: New → Triaged
Changed in pulseaudio:
status: Triaged → Fix Committed
status: Triaged → Fix Committed
Revision history for this message
Kees Cook (kees) wrote :

Thanks! This was fixed in: http://www.ubuntu.com/usn/usn-573-1

Changed in pulseaudio:
status: Fix Committed → Fix Released
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.