cdrecord security leak

[Tomasz Kłoczko]

On Thu, 15 May 2003, Bartłomiej Ogryczak wrote:

> Z http://www.xcdroast.org/:
> # SECURITY LEAK in cdrecord 2.0 and therefore the X-CD-Roast non-root-mode:
> A fatal local root exploit was discovered in all cdrecord versions up to 
> 2.01a14. You are strongly advised to either upgrade to 2.01a14 or to 
> disable the non-root-mode within X-CD-Roast. Next release of X-CD-Roast 
> ("soon") will try to avoid to give access to an exploitable cdrecord.
> 
> W Ra jest cdrtools-1.11a39-1, w Ra-updates-general - cdrtools-2.01a12-1

Popawiona wersja od wczoraj jest w updates/security:

[fpldra w ep09 SRPMS]$ ls -l cdrtools-2.01a14-1.src.rpm 
-rw-r--r--    1 fpldra   pldra     1397922 May 14 00:44 cdrtools-2.01a14-1.src.rpm

Wersję z u/g zaraz usunę.

kloczek
-- 
-----------------------------------------------------------
*Ludzie nie mają problemów, tylko sobie sami je stwarzają*
-----------------------------------------------------------
Tomasz Kłoczko, sys adm @zie.pg.gda.pl|*e-mail: kloczek w rudy.mif.pg.gda.pl*