SUSE Package Hub - openSUSE-2023-329

Update Info

openSUSE-2023-329

Security update for sox

Type: security

Severity: important

Issued: 2023-10-26

Description:

This update for sox fixes the following issues:

- Apply various fix patches taken from Debian package;
  it fixes also other entries (CVE-2022-31650 boo#1212060
  CVE-2023-34318 boo#1212062 CVE-2023-34432 boo#1212063)
- Fix floating point exception in src/voc.c (CVE-2023-32627 boo#1212061)

References

CVE: CVE-2023-34432
CVE: CVE-2023-34318
CVE: CVE-2023-32627
CVE: CVE-2022-31651
CVE: CVE-2022-31650
CVE: CVE-2021-40426
CVE: CVE-2021-3643
CVE: CVE-2021-33844
CVE: CVE-2021-23159
CVE: CVE-2019-13590
Bugzilla: 1212063 VUL-0: CVE-2023-34432: sox: heap-buffer-overflow in src/formats_i.c
Bugzilla: 1212062 VUL-0: CVE-2023-34318: sox: heap-buffer-overflow in src/hcom.c
Bugzilla: 1212061 VUL-0: CVE-2023-32627: sox: floating point exception in src/voc.c
Bugzilla: 1212060 VUL-0: CVE-2023-26590: sox: floating point exception in src/aiff.c

Packages

sox-14.4.2-bp155.3.3.1