The remote host is missing an update to libdumb announced via advisory DSA 1123-1. Luigi Auriemma discovered that DUMB, a tracker music library, performs insufficient sanitising of values parsed from IT music files, which might lead to a buffer overflow and execution of arbitrary code if manipulated files are read.

For the stable distribution (sarge) this problem has been fixed in version 0.9.2-6. For the unstable distribution (sid) this problem has been fixed in version 0.9.3-5. We recommend that you upgrade your libdumb packages. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201123-1