2017-11-19 21:49 GMT+01:00 Måns Rullgård <mans@mansr.com>:

Jaromír Mikeš <mira.mikes@gmail.com> writes:

> Hi,
>
> Is CVE-2017-15371 really fixed?
>
> https://bogomips.org/sox.git/commit/?h=pu&id=818bdd0ccc1e5b6cae742c740c17fd414935cf39

It no longer triggers the assert() for me.

> Debian security team report this issue as persistent and reopened a bug.
>
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878809

They're a bit light on details.