Date:         Thu, 2 Nov 2000 18:15:29 -0700
From:         Kurt Seifried <seifried@SECURITYPORTAL.COM>
Subject:      LSLID:2000110207 - Kondara - esound
To:           LINUX-SECURITY@LISTSERV.SECURITYPORTAL.COM

LSLID:2000110207

esound(2000/10/28)
Description
The "esound" packages included in Kondara MNU/Linux 1.2 has a serious bug which
creates a world-writable directory, /tmp/.esd. You should update the following
software packages.

RPMS/SRPMS
ftp://ftp.jaist.ac.jp/pub/os/linux/kondara/Kondara-1.2/errata/security/alpha/eso
und-0.2.20-2k.alpha.rpm
ftp://ftp.jaist.ac.jp/pub/os/linux/kondara/Kondara-1.2/errata/security/alpha/eso
und-devel-0.2.20-2k.alpha.rpm
ftp://ftp.jaist.ac.jp/pub/os/linux/kondara/Kondara-1.2/errata/security/i586/esou
nd-0.2.20-2k.i586.rpm
ftp://ftp.jaist.ac.jp/pub/os/linux/kondara/Kondara-1.2/errata/security/i586/esou
nd-devel-0.2.20-2k.i586.rpm
ftp://ftp.jaist.ac.jp/os/linux/kondara/Kondara-1.2/errata/security/SRPMS/SRPMS/e
sound-0.2.20-2k.nosrc.rpm