Multiple vulnerabilities in modplug < 0.8.8.4 may allow remote code execution
http://www.debian.org/security/2012/dsa-2415
Solution:
- Upgrade to version 0.8.8.4
(from redmine: issue id 1032, created on 2012-02-26, closed on 2012-03-01)
- Changesets:
- Revision a9ef511c by Natanael Copa on 2012-02-28T16:04:21Z:
main/libmodplug: security upgrade to 0.8.8.4 (CVE-2011-1761, CVE-2011-2911, CVE-2011-2912, CVE-2011-2913, CVE-2011-2914, CVE-2011-2915)
fixes #1032
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information