drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in game-music-emu
Name: |
Ausführen beliebiger Kommandos in game-music-emu |
|
ID: |
DSA-3735-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian sid, Debian jessie |
|
Datum: |
Do, 15. Dezember 2016, 07:37 |
|
Referenzen: |
http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html |
|
Applikationen: |
game-music-emu |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3735-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff December 15, 2016 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : game-music-emu CVE ID : not yet available
Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened. Further information can be found at redux-compromising-linux-using-snes.html
For the stable distribution (jessie), this problem has been fixed in version 0.5.5-2+deb8u1.
For the unstable distribution (sid), this problem has been fixed in version 0.6.0-4.
We recommend that you upgrade your game-music-emu packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----
iQIcBAEBCAAGBQJYUdTEAAoJEBDCk7bDfE42QNsP/2intRpy37rvYiDAOHaHxfEw 2yU6afMuw/SAYDIU4Dj7pjkC+zz0y59lA4betqD8VqFokWjpy8Hy1C+i487jkLNJ vs7OM19yDiotwbB69ijU52mDTF8QMUJ2DgPah/j6ZLqi/l34uy+vdCMTx4PgO4gN F2F/esg0D6bC67Xll9iDwVJPJeYE4/GU5/s/XXw1prm0lAm4SiTKJVdrA9viiVn4 5xvL/V572/1VNNkFenHSqwixYvKd5yygLRKB47W9fHNDx9t6S3jUDA6diRbKsMOt jcT8thjUe7o1YfC1bbcIURgJJA6abVZWjHSvX8grWhUINcpNTn2ZtetJDFChkuKS QGACXI4qlPUgWXhovtiMxzQIDTeeXryJxmaNUAL9PY/T3By3Z6uBurkkxNIpKMdg rQoMgc6SANlpVnHlz6LojqibCp5Ps2MQQI0rrJtoEkOJ4iv7DKs+/JGkS7MnfK/S dS2ee/NaWA7yCCsB15aYAHlCOQYW3KTP7jmUBwA6eeKTG8+3mtbL17IjnegBA020 6gNmM5u1G3z6RxKTC8qLuXzEDKvbvc+7I4hbf4tf8BQ4VmWQUO95b4ZEibbFnHeL N1bFBxnjnL5fmsSGH39QmKAtgqI1OdZPt8Y1hxNlj0bjgq2Xo8qtyL8RRzpswhd0 FL8VI1mPIoJdhmToHmLy =l961 -----END PGP SIGNATURE-----
|
|
|
|