Description

Debian has issued an update for pulseaudio. This fixes a security issue, which can be exploited by malicious, local users to perform certain actions with escalated privileges.

The security issue is caused due to the pulseaudio daemon failing to check whether it has successfully dropped its privileges via "setuid()". This can potentially be exploited to launch the daemon with root privileges, which may allow the user to perform certain actions as the root user.

This is related to:
SA28623

Solution
Apply updated packages.
Further details available in Customer Area

Original Advisory
http://www.us.debian.org/security/2008/dsa-1476

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area