Jaromír Mikeš <mira.mi...@gmail.com> writes: > Hi, > > is this CVE-2017-15372 patch final? > > https://bogomips.org/sox.git/commit/?h=pu&id=3f7ed312614649e2695b54b398475d32be4f64f3 > > I sought some discussion on sox-devel list on this topic and I am not > sure if I can use this patch already in debian.
The patch correctly fixes the problem. We talked about doing some additional clean-up, but meanwhile you can use this patch. -- Måns Rullgård ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ SoX-devel mailing list SoX-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sox-devel