From Mageia wiki
MGASA-2012-0216
| Date: | August 12th, 2012 |
| Affected releases: | 2 |
Description:
Updated acpid package fixes security vulnerabilities:
Oliver-Tobias Ripka discovered that an ACPI script incorrectly handled
power button events. A local attacker could use this to execute
arbitrary code, and possibly escalate privileges. The script is
installed as /usr/share/doc/acpid/samples/powerbtn/powerbtn.sh, so this
only affects systems where this has been added to the acpi configuration
(CVE-2011-2777).
Updated Packages:
acpid-2.0.14-4.1.mga2
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2777
https://bugs.mageia.org/show_bug.cgi?id=7003
