2017-10-03 20:07 GMT+02:00 Christian Schoenebeck < schoeneb...@linuxsampler.org>:
Hi Christian, > I just applied your patch regarding CVE-2017-12950, CVE-2017-12952 and > CVE-2017-12953 for libgig on our side, in slightly modified form: > > http://svn.linuxsampler.org/cgi-bin/viewvc.cgi?view=revision&revision=3348 > > Additionally, the following 2 patches are yet missing on your side, as far > as > I can see it. > > 1. CVE-2017-12951: > http://svn.linuxsampler.org/cgi-bin/viewvc.cgi?view=revision&revision=3349 > > 2. CVE-2017-12954: > http://svn.linuxsampler.org/cgi-bin/viewvc.cgi?view=revision&revision=3350 > Sorry for coming so late ... I am just applying your patches and will update libgig in debian this evening. best regards mira
