[IT-SecNots] [SECURITY] [DSA 3735-1] game-music-emu security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3735-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
December 15, 2016                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : game-music-emu
CVE ID         : not yet available

Chris Evans discovered that incorrect emulation of the SPC700 audio
co-processor of the Super Nintendo Entertainment System allows the
execution of arbitrary code if a malformed SPC music file is opened.
Further information can be found at
http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html

For the stable distribution (jessie), this problem has been fixed in
version 0.5.5-2+deb8u1.

For the unstable distribution (sid), this problem has been fixed in
version 0.6.0-4.

We recommend that you upgrade your game-music-emu packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=l961
-----END PGP SIGNATURE-----