Package Release Info

sox-14.4.2-bp150.2.4

Update Info: Base Release
Available in Package Hub : 15

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

libsox3
sox
sox-devel

Change Logs

Version: 14.4.2-bp150.2.1
* Wed Feb 14 2018 kbabioch@suse.com
- Added patches:
  * CVE-2017-11332.patch: Fixed the startread function in wav.c, which allowed
    remote attackers to cause a DoS (divide-by-zero) via a crafted wav file.
    (CVE-2017-11332 bsc#1081140)
  * CVE-2017-11358.patch: Fixed the read_samples function in hcom.c, which
    allowed remote attackers to cause a DoS (invalid memory read) via a crafted
    hcom file. (CVE-2017-11358 bsc#1081141)
  * CVE-2017-11359.patch: Fixed the wavwritehdr function in wav.c, which
    allowed remote attackers to cause a DoS (divide-by-zero) when converting a
    a crafted snd file to a wav file. (CVE-2017-11359 bsc#1081142)
  * CVE-2017-15370.patch: Fixed a heap-based buffer overflow in the ImaExpandS
    function of ima_rw.c, which allowed remote attackers to cause a DoS during
    conversion of a crafted audio file. (CVE-2017-15370 bsc#1063439)
  * CVE-2017-15371.patch: Fixed an assertion abort in the function
    sox_append_comment() in formats.c, which allowed remote attackers to cause
    a DoS during conversion of a crafted audio file. (CVE-2017-15371
    bsc#1063450)
  * CVE-2017-15372.patch: Fixed a stack-based buffer overflow in the
    lsx_ms_adpcm_block_expand_i function of adpcm.c, which allowed remote
    attackers to cause a DoS during conversion of a crafted audio file.
    (CVE-2017-15372 bsc#1063456)
  * CVE-2017-15642.patch: Fixed an Use-After-Free vulnerability in
    lsx_aiffstartread in aiff.c, which could be triggered by an attacker by
    providing a malformed AIFF file. (CVE-2017-15642 bsc#1064576)
  * CVE-2017-18189.patch: Fixed a NULL pointer dereference triggered by a
    corrupt header specifying zero channels in the startread function in
    xa.c, which allowed remote attackers to cause a DoS (CVE-2017-18189
    bsc#1081146).
- Removed sox-doublefree.patch
* Tue Dec 19 2017 meissner@suse.com
- sox-doublefree.patch: initialize comment, it might
  get returned back with OK. (bsc#1064576 CVE-2017-15642)
* Fri Aug 25 2017 olaf@aepfle.de
- Enable lame/mad/twolame unconditionally
- Remove ffmpeg/opus conditional because it is always present
* Mon Mar 06 2017 zaitor@opensuse.org
- Replace libopus-devel with pkgconfig(opusfile) BuildRequires:
  this is what configure looks for, and will actually build the
  optional opus support as intended.
Version: 14.4.2-5.1
* Thu Feb 15 2018 kbabioch@suse.com
- Added patches:
  * CVE-2017-11332.patch: Fixed the startread function in wav.c, which allowed
    remote attackers to cause a DoS (divide-by-zero) via a crafted wav file.
    (CVE-2017-11332 bsc#1081140)
  * CVE-2017-11358.patch: Fixed the read_samples function in hcom.c, which
    allowed remote attackers to cause a DoS (invalid memory read) via a crafted
    hcom file. (CVE-2017-11358 bsc#1081141)
  * CVE-2017-11359.patch: Fixed the wavwritehdr function in wav.c, which
    allowed remote attackers to cause a DoS (divide-by-zero) when converting a
    a crafted snd file to a wav file. (CVE-2017-11359 bsc#1081142)
  * CVE-2017-15370.patch: Fixed a heap-based buffer overflow in the ImaExpandS
    function of ima_rw.c, which allowed remote attackers to cause a DoS during
    conversion of a crafted audio file. (CVE-2017-15370 bsc#1063439)
  * CVE-2017-15371.patch: Fixed an assertion abort in the function
    sox_append_comment() in formats.c, which allowed remote attackers to cause
    a DoS during conversion of a crafted audio file. (CVE-2017-15371
    bsc#1063450)
  * CVE-2017-15372.patch: Fixed a stack-based buffer overflow in the
    lsx_ms_adpcm_block_expand_i function of adpcm.c, which allowed remote
    attackers to cause a DoS during conversion of a crafted audio file.
    (CVE-2017-15372 bsc#1063456)
  * CVE-2017-15642.patch: Fixed an Use-After-Free vulnerability in
    lsx_aiffstartread in aiff.c, which could be triggered by an attacker by
    providing a malformed AIFF file. (CVE-2017-15642 bsc#1064576)
  * CVE-2017-18189.patch: Fixed a NULL pointer dereference triggered by a
    corrupt header specifying zero channels in the startread function in
    xa.c, which allowed remote attackers to cause a DoS (CVE-2017-18189
    bsc#1081146).
- Removed sox-doublefree.patch
Version: 14.4.2-2.1
* Tue Sep 22 2015 mpluskal@suse.com
- Update to 14.4.2
  o Add optional support for reading Ogg Opus files.
  o Fix for max size text chunks in aiff files.
  o Add reading support for RF64 WAV files.
  o Work around for libsndfile created RF64 files with invalid
    sizes.
  o Detect MS ADPCM WAV files with invalid blocks.
  o Detect Sphere files with invalid header sizes.
  o 'Deemph' can now also be used at 48kHz sample rate.
  o 'Rate' now much faster in many cases.
  o Allow sending spectrograms to stdout.
  o Allow use of Dolph window with spectrograms.
  o Allow mixing time and sample-count arguments for the delay
    effect, and for spectrogram -S and -d.
  o Support multi-channel LADSPA plugins.
  o Support infinite repetition with repeat.
  o Improved pink noise frequency response in synth.
  o Extended syntax for specifying audio positions to several
    effects.
  o Fix integer overflow in mcompand. [3590093]
  o Add optional latency compenstation for LADSPA plugins.
  o New -p option for soxi to display sample precision.
  o New libsox example6: give explicit output attributes.
  o Speed optimization for effects that operate on channels
    independently.
  o Fix memory leaks.
  o Most internal symbols (lsx_*) are no longer exported.
- Drop sox-14.4.0-ocloexec.patch as it brings little enhancement
  and there has been no activity at upstreaming it
- Enable ffmpeg and opus by default
* Wed Sep 11 2013 reddwarf@opensuse.org
- Update to version 14.4.1
  o Fix pipe file-type detection regression
  o MAUD write fixes
  o Fix crash when seeking within a FLAC file
  o Fix Ogg Vorbis files with certain numbers of channels being
    truncated
  o Fix reading 64-bit float WAVs
  o Fix potential buffer overrun when writing FLAC files directly via
    sox_write()
  o Check whether pulseaudio is available before choosing it as
    default
  o Restore 8 seconds default for spectrogram, if the input length is
    not known
  o Set output length for splice to unknown instead of 0
  o Increase maximum width for spectrograms
  o Fix memory leaks in LADSPA effect
  o Fix hang in several effects (rate, tempo, and those based on
    dft_filter) when processing long files
  o Prevent (m)compand from tampering with their arguments
  o Fix input length calculation for combine methods other than
    concatenate
  o Fix to configure.ac to work with Autoconf 2.69
- Rebase sox-14.4.0-ocloexec.patch
* Thu Feb 07 2013 crrodriguez@opensuse.org
- sox-14.4.0-ocloexec.patch: edited, config.h must be included
  _everywhere_ and GNU_SOURCE defined so O_CLOEXEC is available
  for all targets.
* Sat Nov 17 2012 crrodriguez@opensuse.org
- Disable OSS support, alsa and pulse are enough for us now.
* Sat Apr 14 2012 reddwarf@opensuse.org
- Update to version 14.4.0
  o Add floating point encodings in AIFF-C files.
  o Pad WAV data chunks to an even number of bytes.
  o Made Pulse Audio driver the default driver.
  o Lots of improvements to man pages.
  o New upsample, hilbert, and downsample effects.
  o Fix fading bugs.
  o Enable --plot on biquad and fir effects.
  o Now effects chain can be unlimitted length.
  o Fix newfile/restart effects when merging or mixing files.
  o Fix crash in compand and mcompand effect.
  o Improved audio length calculations when using effects.
  o New trim effect with enhanced capabilities.
  o Improved large file support.
  o MP2 write support.
- Split librarires to follow SLPP
- Optionally enable twolame support
- Use pkgconfig() style BuildRequires
- Update ocloexec patch to apply to the new version
- Remove audioio.h/sunaudio support
- Remove unneeded ncurses BuildRequire
- Remove patches not needed anymore (sox-14.3.2-new_ffmpeg.patch,
  sox-14.3.1-undefined.patch and sox-14.3.1-aliasing.patch)
* Sun Nov 27 2011 pascal.bleser@opensuse.org
- fix build on < 12.1 by not applying the O_CLOEXEC patch there as it is not in
  the glibc
- fix build on >= 12.1 by adding ncurses-devel to the BuildRequires
* Fri Nov 18 2011 crrodriguez@opensuse.org
- libsox: Use O_CLOEXEC where needed, this is specially important
  in library code and even more here as threading is used.
* Mon Jun 27 2011 coolo@novell.com
- remove _service file, way too fragile (see sr#74395)
* Wed Jun 22 2011 reddwarf@opensuse.org
- make it support new ffmpeg versions
- remove buildstamp without modifying the output
- use opencore-amr for AMR support
* Tue Mar 01 2011 reddwarf@opensuse.org
- Update to version 14.3.2
  o Seek support for MP3 files.
  o Fix WavPack header bugs.
  o Fix length error in 24-bit RIFF files.
  o Add default channel mapping to 24-bit RIFF files.
  o Fix ffmpeg crashes on some CPU's.
  o Read wider range of WAV files with chunks embedded.
  o Fix incorrect MP3 length determination with some VBR files with initial silence.
  o Enable LADSPA support by default on all platforms if libltdl exists.
  o Allow now legend on spectrogram.
  o Fix -w option on stat effect.
  o Support specifying absolute end position instead of offset from beginning of trim operation.
* Tue Sep 21 2010 reddwarf@opensuse.org
- Add libmagic support
- Added sox-14.3.1-undefined.patch and sox-14.3.1-aliasing.patch
- Run spec-cleaner and general cleanup
- Fix MP3 support linking directly against needed libraries
- Fix License tag
* Tue Apr 13 2010 davejplater@gmail.com
- Update to version 14.3.1, remove sox-14.2.0-vorbis.patch due to
  vorbis1.h no longer existing. Fix sox-no_buildstamp.patch.
- LibSoX interface changes:
  o Added new variants of sox_open to allow read/write from/to memory
    buffers (in POSIX 2008 environment); see example5.c.  (robs)
- File formats:
  o New Grandstream ring-tone (gsrt) format.  (robs)
  o CVSD encode/decode speed-ups.  (Kimberly Rockwell, P. Chaintreuil)
  o Fix failed writing 24-bit PAF files (and possibly other libsndfile
    based formats).  (cbagwell)
  o Allow libsndfile to be dlopen()'ed at runtime if --enable-dl-sndfile
    is used. (Doug Cook)
  o Allow amr-nb/amr-wb to be dlopen()'ed at runtime if
  - -enable-dl-amrwb or --enable-dl-amrnb is used. (Doug Cook)
  o amrnb and amrwb formats can optionally use opencore-amr libraries.
    (cbagwell)
- Audio device drivers:
  o Add 32-bit support to ALSA driver.  (Pavel Hofman)
- Effects:
  o Fix [2254919] silence doesn't trim digital silence correctly.  (robs)
  o Fix [2859842] stats effect crashes on 64-bit arch.  (Ulrich Klauer)
- Other new features:
  o Added libSoX example #4: concatenating audio files.  (robs)
  o Show soxi version & usage information when no args given.  (robs)
- Other bug fixes:
  o Fix build so that grouped files (e.g. play -r 6k "*.vox" plays all
    at 6k) works.  (robs)
  o Fix build to support auto file type detection with pipes on FreeBSD
    and elsewhere.  (Dan Nelson)
  o Fix simultaneous play & rec not working.  (robs)
  o Fix missing documentation for -R (repeatable), and pulseaudio driver.
  o Fix memory leak of format private data.  (Slawomir Testowy)
- Internal improvements:
  o Move bit-rot detection support files to sub-directory (could
    previously cause build problems).  (robs)
  o Added utilities to help any format handler dlopen() external
    libraries at run time instead of link time. (Doug Cook)
* Sun Dec 13 2009 cmorve69@yahoo.es
- Remove buildstamp to help build-compare
* Thu Jun 25 2009 cmorve69@yahoo.es
- made ffmpeg, mad, lame, amrwb and amrnb support build conditional
- enable PulseAudio support
* Mon Jun 22 2009 prusnak@suse.cz
- updated to 14.3.0
  * LibSoX interface changes:
    o sox_format_init() has been supeseded by sox_init().
    o Removed obsolete error codes (SOX_E...); new sox_strerror()
    function to convert error codes to text.
    o Use of sox_effect_options() is now mandatory when initialising an
    effect (see example0.c for an example of this).
    o sox_flow_effects() has a new (3rd) parameter: a void pointer
    `client_data' that is passed as a new (2nd) parameter to the flow
    callback function.  client_data may be NULL.
  * File formats:
    o Slight improvement to A-law/u-law conversion accuracy: round LSB
    instead of truncating.  (robs)
    o Fix length in wav header with multi-channel output to pipe.  (robs)
    o Fix [2028181] w64 float format incompatibility.  (Tim Munro)
    o Fix reading AIFF files with pad bytes in COMT chunks. (Joe Holt)
    o Fix AIFF file length bug to stop reading trash data on files that
    have extra chunks at end of file. (Joe Holt)
    o Fix file length being 4 bytes short for AIFF sowt CD tracks. (Joe Holt)
    o Fix [2404566] segfault when converting from MS ADPCM wav file.  (robs)
    o Fix slight FLAC seek inaccuracy e.g. when using `trim' effect.  (robs)
    o Fix mp3 decode sometimes being up to a block short.  (robs)
    o Fix not outputing GSM-in-wav when input is GSM-in-wav.  (robs)
  * Audio device drivers:
    o New native OpenBSD audio handler for play/recording.  (Alexandre Ratchov)
    o 24-bit support for ALSA handler.  (robs)
    o Warn if ALSA under/overrun.  (robs)
  * Effects:
    o New `stats' effect; multichannel audio statistics.  (robs)
    o New `sinc' FFT filter effect; replacement for `filter'.  (robs)
    o New `fir' filter effect using external coefficients/file.  (robs)
    o New `biquad' filter effect using external coefficients.  (robs)
    o New `overdrive' effect.  (robs)
    o New `vad' Voice Activity Detector effect.  (robs)
    o `synth' enhancements: can now set common parameters for multiple
    channels, new `pluck' and `tpdf' types, `scientific' note
    notation, [2778142] just intonation.  (robs)
    o New multi-channel support and revised sizing options for `spectrogram'.
    N.B. revised options are not directly backwards compatible -- see the
    man page for details of the new syntax.  (robs)
    o Richer gain/normalise options.  (robs)
    o [2704442] Slight change to `riaa' gain: now norm'd to 0dB @ 1k
    (previously 19.9dB @ DC).  (Glenn Davis)
    o Fix [2487589] `dither' clipping detection & handling.  (robs)
    o Fix `repeat' sometimes stopping repeating too soon.  (robs)
    o Fix `repeat' sometimes repeating wrong audio segments.  (robs)
    o Fix [2332343] 'silence' segfault with certain lengths. (cbagwell)
    o Fix `silence' empty output file with A-law input.  (robs)
    o Fix temporary file problems in Windows (cygwin) with normalise and
    other effects.  (robs)
    o Fix [2779041] spectrogram PNG file is invalid on Windows.  (robs)
    o Fix [2787587] `trim x 0' should produce zero length audio.  (robs)
    o Parallel effects channel processing on some hyper-threading/mult-core
    architectures.  New `--single-threaded' option to disable this.  (robs)
  * Other new features:
    o Added ability to create shared DLL's on cygwin (cbagwell)
    o New `--guard' & `--norm' options; use temporary files to guard against
    clipping for many, but not currently all, effects.  (robs)
    o New `--ignore-length' option to ignore length in input file header (for
    simple encodings & for mp3); instead, read to end of file.  (robs)
    o New `--temp DIRECTORY' option.  (robs)
    o New `--play-rate-arg ARG' option.  (robs)
    o New SOX_OPTS environment variable; can be used to provide default
    values for above and other options.  (robs)
    o Grouped files, e.g. play -r 6k "*.vox" plays all at 6k.  (robs)
    o Automatically `dither'; new `--no-dither' option to disable this.  (robs)
    o Can now use `v' & `V' keys to adjust volume whilst playing audio (on some
    systems).  (robs)
    o New bitrate, time in seconds, & total options for soxi; bitrate
    and file-size display for sox.  (robs)
    o `Magic' (libmagic) file type detection now selected using `--magic'
    option (where supported).
    o [2003121] In many cases, no longer need to specify -t when inputing
    audio from a `pipe'.  (robs)
    o Support more Shoutcast URL variants.  (robs)
    o Added libSoX example #3: playing audio.  (robs)
  * Other bug fixes:
    o Fix [2262177] SoX build could fail with parse /etc/issue error.  (robs)
    o Fix "no handler for detected file type `application/octet-stream;
    charset=binary'" with raw files when using libmagic.  (robs)
  * Internal improvements:
    o Rationalise use of and make repeatable across different platforms
    pseudo random number generators.  (robs)
    o Rationalise effects' options interface (getopt compatible).  (robs)
    o Added stub headers to allow test compilation of all sources on
    linux.  (robs)
* Fri Jan 16 2009 prusnak@suse.cz
- updated to 14.2.0
  * Processing chain:
    o now supports any number of input files
    o now allows multiple effects chains, multiple input pipes and,
    in some cases, multiple output files
    o initial support for Mac OSX audio IO
    o better support for large (2G/4G) files.
  * New effects:
    o (ISO 226) loudness control
    o RIAA vinyl EQ
    o pitch bending
  * Enhanced effects:
    o rate: minimum/intermediate/linear phase, custom bandwidth
    o dither: noise shaping
    o mcompand: now with Linkwitz-Riley crossover.
  * Various other small fixes/improvements.
* Thu Oct 23 2008 ro@suse.de
- fix build with updated libtool
* Mon Sep 01 2008 prusnak@suse.cz
- updated to 14.1.0
  * New WavPack format.
  * New htk format.
  * New .f4 & .f8 raw file extensions.
  * New `splice' effect; splice together audio sections.
  * New `remix' effect; mixes any number of channels.
  * New `norm' (normalise) effect.
  * New `delay' effect; delay one or more channels.
  * New `contrast' enhancement effect.
  * New `rate' high quality resampling effect.
  * New `spectrogram' effect; creates a PNG (if built with PNG lib).
  * New `gain' alias for the vol effect.
  * New option --help-format shows info about supported format(s).
  * New --combine=mix-power option to mix combine using 1/sqrt(n) scaling instead of 1/n.
  * New --input-buffer option to specify (only) input buffer size.
  * New `soxi' utility to extract/display file header fields.
  * New VU meter.
  * Can now write .amb (.wav variant) files.
  * Can now read 2,3(2.6),4 bit ADPCM .voc files.
  * Can now read some MP3 ID3 tags.
  * Fix rec shortcut should apply bit depth (8-bit, 16-bit, etc.) to input handler.
  * Fix endian selection (-B, -L, -x) in some circumstances.
  * Various other small fixes/improvements.
* Fri Jun 27 2008 schwab@suse.de
- Use autoreconf.
* Tue Mar 25 2008 prusnak@suse.cz
- build file format modules with LDFLAGS -module -avoid-version
  (module-avoid-version.patch)