2017-11-19 21:49 GMT+01:00 Måns Rullgård : > Jaromír Mikeš writes: > > > Hi, > > > > Is CVE-2017-15371 really fixed? > > > > https://bogomips.org/sox.git/commit/?h=pu&id= > 818bdd0ccc1e5b6cae742c740c17fd414935cf39 > > It no longer triggers the assert() for me. > > > Debian security team report this issue as persistent and reopened a bug. > > > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878809 > > They're a bit light on details. ​It is closed now ... Thank you https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878809 best regards mira​