Re: Request for review of soundtouch (security)

2017-12-27 Thread James Cowgill
Hi, On 30/11/17 14:24, Gabor Karsay wrote: > soundtouch has 3 low urgency security issues[0]. There is an upstream > commit[1] that apparently fixes them, however without mentioning the > issues or any bug references in the commit. > > The full disclosure[2] of the CVEs provides 3 crafted wav fil

Request for review of soundtouch (security)

2017-11-30 Thread Gabor Karsay
Hi, soundtouch has 3 low urgency security issues[0]. There is an upstream commit[1] that apparently fixes them, however without mentioning the issues or any bug references in the commit. The full disclosure[2] of the CVEs provides 3 crafted wav files that can be run with soundstretch, the ma