[SECURITY] [DLA 2292-1] milkytracker security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2292-1 [email protected] https://www.debian.org/lts/security/ July 27, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package :...

CVE-2020-15569

MilkyTracker up to version 1.02.00 is affected by CVE-2020-15569 due to a use-after-free in PlayerGeneric destructor. Public references confirm the flaw in PlayerGeneric.cpp and variants across OSV/NVD records. Debian’s DLA-2292-1 fixes this and related CVEs in milkytracker by upgrading to 0.90.8...