Your message dated Wed, 14 Dec 2016 10:25:15 +0000
with message-id <e1ch6kn-000dyf...@fasolo.debian.org>
and subject line Bug#848071: fixed in game-music-emu 0.6.0-4
has caused the Debian Bug report #848071,
regarding Code execution in SNES code
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
848071: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848071
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libgme0
Version: 0.6.0-3
Severity: grave
Tags: security
Hi,
please see
http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html
for details.
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: game-music-emu
Source-Version: 0.6.0-4
We believe that the bug you reported is fixed in the latest version of
game-music-emu, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 848...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sebastian Dröge <sl...@debian.org> (supplier of updated game-music-emu package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 14 Dec 2016 09:17:02 +0200
Source: game-music-emu
Binary: libgme0 libgme-dev
Architecture: source amd64
Version: 0.6.0-4
Distribution: unstable
Urgency: high
Maintainer: Sebastian Dröge <sl...@debian.org>
Changed-By: Sebastian Dröge <sl...@debian.org>
Description:
libgme-dev - Playback library for video game music files - development files
libgme0 - Playback library for video game music files - shared library
Closes: 848071
Changes:
game-music-emu (0.6.0-4) unstable; urgency=high
.
* debian/patches/04_spc-out-of-bounds-reads-writes.patch:
+ Fix out of bound reads/writes with security implications (Closes:
#848071).
Patch provided by Chris Evans at
https://scarybeastsecurity.blogspot.gr/2016/12/redux-compromising-linux-using-snes.html
Checksums-Sha1:
352f422aaaad57135ad7824a7f2384c4bb25ed6d 2009 game-music-emu_0.6.0-4.dsc
e204071cf9cd4a836b542cacec1b88de6aae2c4b 5500
game-music-emu_0.6.0-4.debian.tar.xz
bb6230078964bc6c5ca263f8a998adcfa577766d 5778
game-music-emu_0.6.0-4_amd64.buildinfo
3c5d7a78936bc8621202479ffaf5e9dfbaf22752 11280 libgme-dev_0.6.0-4_amd64.deb
726211e258999445938f9fa895ca0b296defbb74 517176
libgme0-dbgsym_0.6.0-4_amd64.deb
4dabd575cfbc6b9653df8c3b7e6a83bef4390e91 126478 libgme0_0.6.0-4_amd64.deb
Checksums-Sha256:
2bfc72d0b621b9a8f2b9974bec3508d0d775ddabac5c5bcce5b722251eeb3a19 2009
game-music-emu_0.6.0-4.dsc
f590ac6f3c9fa317927ca706fff614cd2968a6fca09c48b3e3a9afbc53b621b6 5500
game-music-emu_0.6.0-4.debian.tar.xz
677ac209af713dabe8227e3cedd152a07e418d31a765974b8c1f7fb337de8789 5778
game-music-emu_0.6.0-4_amd64.buildinfo
6d4c0360d4667cf93270ef3c5a6daf803341b25772cf7412b7b245df575b5348 11280
libgme-dev_0.6.0-4_amd64.deb
3f518b002fdeb4b1f24c5e6afcf941a4465179642253094a0fcbc0c63d9dd58b 517176
libgme0-dbgsym_0.6.0-4_amd64.deb
46707cff89c6b6e5b2ebddcbe9eeb9b08eeaa96653668323d52ce462e4cf4104 126478
libgme0_0.6.0-4_amd64.deb
Files:
12375e3d2905cd7916ed947cf0fa5158 2009 sound optional game-music-emu_0.6.0-4.dsc
4762246b271b19a6f14665ae4105b70d 5500 sound optional
game-music-emu_0.6.0-4.debian.tar.xz
bc6e8976e33908f9d8ce114e4a8ef7ae 5778 sound optional
game-music-emu_0.6.0-4_amd64.buildinfo
8d9acf62ee7e62cb56bea2c50bcdd96e 11280 libdevel optional
libgme-dev_0.6.0-4_amd64.deb
de70188613a4f643bdbb02cb7b0fa11e 517176 debug extra
libgme0-dbgsym_0.6.0-4_amd64.deb
70e46d8a520b9dcb6e0fd9b06ae9e1fe 126478 libs optional libgme0_0.6.0-4_amd64.deb
-----BEGIN PGP SIGNATURE-----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=zMaB
-----END PGP SIGNATURE-----
--- End Message ---