Debian/xmp: unknown
Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm funct
Action: Upgrade xmp to 2.6.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1-1 | - |
Fixed versions
| 2.6.1-1 |
Sources
published · modified · JSON