Privilege escalation

The padroproot function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from 1 setresuid, 2 setreuid, 3 setuid, and 4 seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as...

Fedora 8 : pulseaudio-0.9.8-5.fc8 (2008-0963)

Wed Jan 23 2008 Lubomir Kundrak 0.9.8-5 - Fix CVE-2008-0008 security issue 425481 - Sun Jan 13 2008 Lubomir Kundrak 0.9.8-4.1 - Actually add content to pulseaudio-0.9.8-create-dot-pulse.patch - Make the Source0 tag point to URL instead of a local file - Drop the nochown patch; it's not applied at...