Luigi Auriemma discovered that DUMB, a tracker music library, performs insufficient sanitising of values parsed from IT music files, which might lead to a buffer overflow and execution of arbitrary code if manipulated files are read. For the stable distribution (sarge) this problem has been fixed in version 0.9.2-6. For the unstable distribution (sid) this problem has been fixed in version 0.9.3-5. We recommend that you upgrade your libdumb packages.
Luigi Auriemma discovered that DUMB, a tracker music library, performs insufficient sanitising of values parsed from IT music files, which might lead to a buffer overflow and execution of arbitrary code if manipulated files are read.
For the stable distribution (sarge) this problem has been fixed in version 0.9.2-6.
For the unstable distribution (sid) this problem has been fixed in version 0.9.3-5.
We recommend that you upgrade your libdumb packages.
MD5 checksums of the listed files are available in the original advisory.