[Linuxsampler-devel] security bugs in libgig-4.1.0

[Edgar A. <ed...@ao...>]

Hello,

I'm a long time linux audio user and also maintain a bunch of rpm packages for openSUSE. In an attempt to get falkTX's carla into the official openSUSE distribution, I also currently maintain ligig and other packages carla depends on.

Yesterday (and today again) I received ten mails regarding bug issues from some automated security checks, and as I'm not a programmer and don't have the knowledge to resolve any of these, I want to point you towards these. They all are marked minor severity, but nevertheless I hope you can make sense of these, and possibly fix them upstream.

Below I post links to the opensuse bugzilla entries, each has a comment near the bottom linking to other pages with more detailed test results, gdb and other logs:

http://bugzilla.opensuse.org/show_bug.cgi?id=1102164
http://bugzilla.opensuse.org/show_bug.cgi?id=1102165
http://bugzilla.opensuse.org/show_bug.cgi?id=1102167
http://bugzilla.opensuse.org/show_bug.cgi?id=1102168
http://bugzilla.opensuse.org/show_bug.cgi?id=1102169
http://bugzilla.opensuse.org/show_bug.cgi?id=1102170
http://bugzilla.opensuse.org/show_bug.cgi?id=1102173
http://bugzilla.opensuse.org/show_bug.cgi?id=1102174
http://bugzilla.opensuse.org/show_bug.cgi?id=1102176
http://bugzilla.opensuse.org/show_bug.cgi?id=1102177

Thank you,

Edgar