Bug#801102: Fix for security issue in audiofile (CVE-2015-7747)?

[James Cowgill]

Control: forwarded -1 https://github.com/mpruett/audiofile/pull/25

Hi,

On Mon, 2016-06-13 at 11:20 +0200, Petter Reinholdtsen wrote:
> Hi.  You get this email as author of the audiofile package. Are you
> aware of the security issue reported in Debian for audiofile, see the
> CVE entry on top of <URL: https://bugs.debian.org/src:audiofile
> >.  Is there a fix available?  Is the same issue reported in other
> bug trackers you are aware of?  Are there plans for a new release?

The fix is here:
https://github.com/mpruett/audiofile/pull/25

The links at the top of this page should lead you to various other bug
trackers:
https://security-tracker.debian.org/tracker/CVE-2015-7747

I can fix it right now in Debian (along with a few other things). Hold
on a moment...

James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20160614/3863758e/attachment.sig>