Bug 1405406

Summary: 0day in game-music-emu (CVE-2016-9959)
Product: [Fedora] Fedora Reporter: Maarten van Geijn <rhzilla>
Component: game-music-emuAssignee: Karel Volný <kvolny>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 25CC: anemec, kvolny, moez.roy
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: game-music-emu-0.6.1-1.fc25 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-12-19 23:23:23 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1405423    

Description Maarten van Geijn 2016-12-16 12:34:13 UTC
Description of problem: 

Active 0day in game-music-emu package on fedora25.

Version-Release number of selected component (if applicable):
game-music-emu-0.6.0-8.fc24.x86_64

It's fixed in the upstream release (0.6.1)

references: 

https://security-tracker.debian.org/tracker/CVE-2016-9959
http://scarybeastsecurity.blogspot.nl/2016/12/redux-compromising-linux-using-snes.html

active RFE on Rawhide: 

https://bugzilla.redhat.com/show_bug.cgi?id=1405024

Comment 1 Karel Volný 2016-12-16 13:47:24 UTC
*** Bug 1405424 has been marked as a duplicate of this bug. ***

Comment 2 Fedora Update System 2016-12-16 13:52:32 UTC
game-music-emu-0.6.1-1.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2016-fbf9f8b204

Comment 3 Fedora Update System 2016-12-17 01:38:13 UTC
game-music-emu-0.6.1-1.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-fbf9f8b204

Comment 4 Fedora Update System 2016-12-19 23:23:23 UTC
game-music-emu-0.6.1-1.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.