sox-devel@lists.sourceforge.net unofficial mirror
 help / color / mirror / code / Atom feed
* CVE-2017-15372 patch
@ 2017-11-19  8:18 Jaromír Mikeš
  2017-11-19 12:07 ` Måns Rullgård
  0 siblings, 1 reply; 3+ messages in thread
From: Jaromír Mikeš @ 2017-11-19  8:18 UTC (permalink / raw)
  To: sox-devel, Eric Wong, Måns Rullgård


[-- Attachment #1.1: Type: text/plain, Size: 268 bytes --]

Hi,

is this CVE-2017-15372 patch final?

https://bogomips.org/sox.git/commit/?h=pu&id=3f7ed312614649e2695b54b398475d32be4f64f3

I sought some discussion on sox-devel list on this topic and I am not sure
if I can
use this patch already in debian.


best regatds

mira

[-- Attachment #1.2: Type: text/html, Size: 947 bytes --]

[-- Attachment #2: Type: text/plain, Size: 202 bytes --]

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

[-- Attachment #3: Type: text/plain, Size: 158 bytes --]

_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: CVE-2017-15372 patch
  2017-11-19  8:18 CVE-2017-15372 patch Jaromír Mikeš
@ 2017-11-19 12:07 ` Måns Rullgård
  2017-11-19 14:10   ` Jaromír Mikeš
  0 siblings, 1 reply; 3+ messages in thread
From: Måns Rullgård @ 2017-11-19 12:07 UTC (permalink / raw)
  To: Jaromír Mikeš; +Cc: Eric Wong, sox-devel

Jaromír Mikeš <mira.mikes@gmail.com> writes:

> Hi,
>
> is this CVE-2017-15372 patch final?
>
> https://bogomips.org/sox.git/commit/?h=pu&id=3f7ed312614649e2695b54b398475d32be4f64f3
>
> I sought some discussion on sox-devel list on this topic and I am not
> sure if I can use this patch already in debian.

The patch correctly fixes the problem.  We talked about doing some
additional clean-up, but meanwhile you can use this patch.

-- 
Måns Rullgård

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: CVE-2017-15372 patch
  2017-11-19 12:07 ` Måns Rullgård
@ 2017-11-19 14:10   ` Jaromír Mikeš
  0 siblings, 0 replies; 3+ messages in thread
From: Jaromír Mikeš @ 2017-11-19 14:10 UTC (permalink / raw)
  To: Måns Rullgård; +Cc: Eric Wong, sox-devel


[-- Attachment #1.1: Type: text/plain, Size: 577 bytes --]

2017-11-19 13:07 GMT+01:00 Måns Rullgård <mans@mansr.com>:

> Jaromír Mikeš <mira.mikes@gmail.com> writes:
>
> > Hi,
> >
> > is this CVE-2017-15372 patch final?
> >
> > https://bogomips.org/sox.git/commit/?h=pu&id=
> 3f7ed312614649e2695b54b398475d32be4f64f3
> >
> > I sought some discussion on sox-devel list on this topic and I am not
> > sure if I can use this patch already in debian.
>
> The patch correctly fixes the problem.  We talked about doing some
> additional clean-up, but meanwhile you can use this patch.


​OK ... Thank you!​

mira

[-- Attachment #1.2: Type: text/html, Size: 1384 bytes --]

[-- Attachment #2: Type: text/plain, Size: 202 bytes --]

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

[-- Attachment #3: Type: text/plain, Size: 158 bytes --]

_______________________________________________
SoX-devel mailing list
SoX-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sox-devel

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2017-11-19 14:10 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-11-19  8:18 CVE-2017-15372 patch Jaromír Mikeš
2017-11-19 12:07 ` Måns Rullgård
2017-11-19 14:10   ` Jaromír Mikeš

Code repositories for project(s) associated with this public inbox

	https://80x24.org/mirrors/sox.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).