Your message dated Wed, 14 Dec 2016 10:25:15 +0000 with message-id <e1ch6kn-000dyf...@fasolo.debian.org> and subject line Bug#848071: fixed in game-music-emu 0.6.0-4 has caused the Debian Bug report #848071, regarding Code execution in SNES code to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 848071: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848071 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: libgme0 Version: 0.6.0-3 Severity: grave Tags: security Hi, please see http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html for details. Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: game-music-emu Source-Version: 0.6.0-4 We believe that the bug you reported is fixed in the latest version of game-music-emu, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 848...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sebastian Dröge <sl...@debian.org> (supplier of updated game-music-emu package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Dec 2016 09:17:02 +0200 Source: game-music-emu Binary: libgme0 libgme-dev Architecture: source amd64 Version: 0.6.0-4 Distribution: unstable Urgency: high Maintainer: Sebastian Dröge <sl...@debian.org> Changed-By: Sebastian Dröge <sl...@debian.org> Description: libgme-dev - Playback library for video game music files - development files libgme0 - Playback library for video game music files - shared library Closes: 848071 Changes: game-music-emu (0.6.0-4) unstable; urgency=high . * debian/patches/04_spc-out-of-bounds-reads-writes.patch: + Fix out of bound reads/writes with security implications (Closes: #848071). Patch provided by Chris Evans at https://scarybeastsecurity.blogspot.gr/2016/12/redux-compromising-linux-using-snes.html Checksums-Sha1: 352f422aaaad57135ad7824a7f2384c4bb25ed6d 2009 game-music-emu_0.6.0-4.dsc e204071cf9cd4a836b542cacec1b88de6aae2c4b 5500 game-music-emu_0.6.0-4.debian.tar.xz bb6230078964bc6c5ca263f8a998adcfa577766d 5778 game-music-emu_0.6.0-4_amd64.buildinfo 3c5d7a78936bc8621202479ffaf5e9dfbaf22752 11280 libgme-dev_0.6.0-4_amd64.deb 726211e258999445938f9fa895ca0b296defbb74 517176 libgme0-dbgsym_0.6.0-4_amd64.deb 4dabd575cfbc6b9653df8c3b7e6a83bef4390e91 126478 libgme0_0.6.0-4_amd64.deb Checksums-Sha256: 2bfc72d0b621b9a8f2b9974bec3508d0d775ddabac5c5bcce5b722251eeb3a19 2009 game-music-emu_0.6.0-4.dsc f590ac6f3c9fa317927ca706fff614cd2968a6fca09c48b3e3a9afbc53b621b6 5500 game-music-emu_0.6.0-4.debian.tar.xz 677ac209af713dabe8227e3cedd152a07e418d31a765974b8c1f7fb337de8789 5778 game-music-emu_0.6.0-4_amd64.buildinfo 6d4c0360d4667cf93270ef3c5a6daf803341b25772cf7412b7b245df575b5348 11280 libgme-dev_0.6.0-4_amd64.deb 3f518b002fdeb4b1f24c5e6afcf941a4465179642253094a0fcbc0c63d9dd58b 517176 libgme0-dbgsym_0.6.0-4_amd64.deb 46707cff89c6b6e5b2ebddcbe9eeb9b08eeaa96653668323d52ce462e4cf4104 126478 libgme0_0.6.0-4_amd64.deb Files: 12375e3d2905cd7916ed947cf0fa5158 2009 sound optional game-music-emu_0.6.0-4.dsc 4762246b271b19a6f14665ae4105b70d 5500 sound optional game-music-emu_0.6.0-4.debian.tar.xz bc6e8976e33908f9d8ce114e4a8ef7ae 5778 sound optional game-music-emu_0.6.0-4_amd64.buildinfo 8d9acf62ee7e62cb56bea2c50bcdd96e 11280 libdevel optional libgme-dev_0.6.0-4_amd64.deb de70188613a4f643bdbb02cb7b0fa11e 517176 debug extra libgme0-dbgsym_0.6.0-4_amd64.deb 70e46d8a520b9dcb6e0fd9b06ae9e1fe 126478 libs optional libgme0_0.6.0-4_amd64.deb -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEEf0vHzDygb5cza7/rBmjMFIbC17UFAlhRFmhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDdG NEJDN0NDM0NBMDZGOTczMzZCQkZFQjA2NjhDQzE0ODZDMkQ3QjUSHHNsb21vQGNv YXhpb24ubmV0AAoJEAZozBSGwte1vA0P/0YXd+UY8K1suViGcTo0wOJTdRJ4a1DS zUWfDGrPnTmZwJ1lMVGk18NHLGoDKrIQzh7CeoeSqLj6cAx8o9lDMAG36sRBboPE 1nWVBHQnil24zstthMGK1jcWDZkCCJTOAv3khmr+UNxASNv3xmjM/czlJldLK/sJ yvfRyNSzca8nFHsRbeP88LYqOn0++G/9D/xsrvEwiAPrCwCStCJWsFq72uHhR0F0 XrCDxIHYNCdttYgRnbJ4woyWMXcX9110hJPU9OzmaXE3Cx/reApgV8gzjO7nvOZC GZoZ4YDOsPCgmITnm4R1Ji+zXtW2lJZDRBkFCvzxQ4W0kregTzUj6+a8ciq+tXVI zuCGXPXbppw+PH0XMhlarczKqidPcfPElIYawIQmTrQuJJhltl0c33e7uv85WoLm IGNa6Jh+ZjR9RzxWvtM9eNN2BLO/P8e7haE2vQycW4IC7VjJQ21g11GBk7B8EnFM tx2RbJjlr3bzXyflD78UM0mBOj/LzaDS8e5pEa3bCGGtq/weDPWL5OuxTb4xBcAJ JJmSlOvXKXBqawayKKBrC9qTkkDmwv/2OY05tu9IIPeW1uBaC4DIU7a3PF1XMRCr X0hIEMzp6NPDYtOEd/aDOArSBumTFe1j05iI4hTPWmWkch7pMff4pQxGbia93lKn k4XORrMdvsk3 =zMaB -----END PGP SIGNATURE-----
--- End Message ---
