{"id":"MGASA-2017-0046","summary":"Updated audacious-plugins packages fix security vulnerability","details":"Chris Evans discovered that incorrect emulation of the SPC700 audio\nco-processor of the Super Nintendo Entertainment System allows the\nexecution of arbitrary code if a malformed SPC music file is opened\n(CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960,\nCVE-2016-9961).\n\nThese issues were previously fixed in MGASA-2016-0428 in the\ngame-music-emu library, but audacious-plugins contains a decoder built\nwith a bundled copy, which has been patched to fix the issues.\n","modified":"2026-04-16T01:49:04.097717161Z","published":"2017-02-11T23:47:14Z","upstream":["CVE-2016-9957","CVE-2016-9958","CVE-2016-9959","CVE-2016-9960","CVE-2016-9961"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2017-0046.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=20177"},{"type":"ADVISORY","url":"http://advisories.mageia.org/MGASA-2016-0428.html"}],"affected":[{"package":{"name":"audacious-plugins","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/audacious-plugins?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2.1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2017-0046.json"}},{"package":{"name":"audacious-plugins","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/audacious-plugins?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2.1.mga5.tainted"}]}],"ecosystem_specific":{"section":"tainted"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2017-0046.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}