Chris Evans discovered that incorrect emulation of the SPC700 audio
co-processor of the Super Nintendo Entertainment System allows the
execution of arbitrary code if a malformed SPC music file is opened.
Further information can be found at
<http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html>
For the stable distribution (jessie), this problem has been fixed in
version 0.5.5-2+deb8u1.
For the unstable distribution (sid), this problem has been fixed in
version 0.6.0-4.
We recommend that you upgrade your game-music-emu packages.
CPE | Name | Operator | Version |
---|---|---|---|
game-music-emu | eq | 0.5.5-2 |