Multiple vulnerabilities in ModPlug could result in execution of arbitrary code or Denial of Service.
|Package||media-libs/libmodplug on all architectures|
|Affected versions||< 0.8.8.4|
|Unaffected versions||>= 0.8.8.4|
ModPlug is a library for playing MOD-like music.
Multiple vulnerabilities have been found in ModPlug:
A remote attacker could entice a user to open a specially crafted media file, possibly resulting in execution of arbitrary code, or a Denial of Service condition.
There is no known workaround at this time.
All ModPlug users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libmodplug-0.8.8.4"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since August 27, 2011. It is likely that your system is already no longer affected by this issue.