Summary
The remote host is missing updates announced in
advisory GLSA 201006-04.
Solution
All xine-lib users should upgrade to an unaffected version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=media-libs/xine-lib-1.1.16.3'
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20201006-04 http://bugs.gentoo.org/show_bug.cgi?id=234777
http://bugs.gentoo.org/show_bug.cgi?id=249041
http://bugs.gentoo.org/show_bug.cgi?id=260069
http://bugs.gentoo.org/show_bug.cgi?id=265250
Insight
Multiple vulnerabilities in xine-lib might result in the remote execution of arbitrary code.
Severity
Classification
-
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities