NASLDB: MDVA-2010:227 : libalsa2
General
ID: 50666
Name: MDVA-2010:227 : libalsa2
Summary: Checks for patch(es) in
Credits: Tenable Network Security, Inc.
Classification
Risk: –
CVSS: –
CVSS Base Vector: –
CVSS Temporal Vector: –
Port: 0
Family: Mandriva Local Security Checks
Type: Local
Description
This is a bugfix and maintenance update bundle that addresses various
issues in a number of packages.
- Some thread-related problems were found in the libalsa2 library
that could cause segmentation faults in some audio applications (one
example being phonon when used with gstreamer output and accessing
pulseaudio via ALSA plugin). The updated libalsa2 package contains an
upstream fix to correct this problem.
On a related note the PulseAudio package has also been updated to
include several important upstream bugfixes including:
- Much improved handling of capture stream latencies and timing
- Client side XCB implementation to replace Xlib (and thus solve some
thread-related issues).
- Support for the a52 alsa plugin when combined with an appropriate
~/.asoundrc file.
- Several bugs in the pulseaudio plugin for the GStreamer audio
framework could lead to application crashes, for instance in pidgin.
This update contains fixes for memory allocation and lock handling of
the pulseaudio plugin.
Exploiting
Exploit Available: –
Exploitability Ease: –
Sources
CVE: –
OSVDB: –
Bugtraq: –
scipID: –
Timeline
Vulnerability Disclosure: –
Patch Release: 2010/11/20
Plugin Release: 2010/11/22
Plugin
Version: 1.6
Filename: mandriva_MDVA-2010-227.nasl
Filesize: 11883 bytes
MD5 Hash: 82ba108d1b0508f6ea10e8471eab978e
Identification: Host/local_checks_enabled
Require Keys: Host/Mandrake/release", "Host/Mandrake/rpm-list
Dependencies: "ssh_get_info.nasl"
Copyright: This script is Copyright© 2010-2011 Tenable Network Security, Inc.
- Latest Plugins
- USN-1611-1 : thunderbird vulnerabilities
- USN-1610-1 : linux vulnerability
- USN-1609-1 : linux-ti-omap4 vulnerability
- SuSE 10 Security Update : PostgreSQL
- RHSA-2012-1364: bind97
- RHSA-2012-1363: bind
- RHSA-2012-1362: thunderbird
- RHSA-2012-1361: xulrunner
- Mandriva Linux Security Advisory : graphicsmagick
- FreeBSD : phpMyAdmin — Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages and Fetching the version information from a non-SSL site is vulnerable to a MITM attack













