-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 09 Feb 2023 16:51:55 +0100 Source: sox Architecture: source Version: 14.4.2+git20190427-1+deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Helmut Grohne <helmut@subdivi.de> Closes: 933372 1010374 1012138 1012516 1021133 1021134 1021135 Changes: sox (14.4.2+git20190427-1+deb10u1) buster-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Fix some resource leaks. * Replace CVE-2017-11358 patch with the non-broken one from upstream (Closes: #933372) * Fix big endian 64bit FTBFS: Import upstream patch to fix hcom writing * Enable test suite. Non-fatal on mipsen, see #1030674 * Fix CVE-2021-3643 and CVE-2021-23210: voc validation (Closes: #1010374) * Fix CVE-2021-23159 and CVE-2021-23172: hcom validation (Closes: #1021133, #1021134) * Fix CVE-2021-33844: wav validation (Closes: #1021135) * Fix CVE-2021-40426: sphere validation (Closes: #1012138) * Fix CVE-2022-31650: aiff validation (Closes: #1012516) * Fix CVE-2022-31651: reject implausible rate (Closes: #1012516) * Silence dh_missing * Add an autopkgtest Checksums-Sha1: 960ea8e992790dcc065e0be8afc25833987d6343 2880 sox_14.4.2+git20190427-1+deb10u1.dsc dc9668256b9d81ef25d672f14f12ec026b0b4087 935449 sox_14.4.2+git20190427.orig.tar.bz2 0486c887fde888ba8c2e9c3f9accdd6f2720dde3 27332 sox_14.4.2+git20190427-1+deb10u1.debian.tar.xz 054fde48a979a2c9079bbcfb1610a4f9254d164f 13884 sox_14.4.2+git20190427-1+deb10u1_amd64.buildinfo Checksums-Sha256: d105b9b835df3e08a4b2a64570244f397308ff095dfda87e159f99d96994aa52 2880 sox_14.4.2+git20190427-1+deb10u1.dsc 81a6956d4330e75b5827316e44ae381e6f1e8928003c6aa45896da9041ea149c 935449 sox_14.4.2+git20190427.orig.tar.bz2 af312f5f270aa4b912dbd8ebc09df823b4daa61b968e8ec1b5892053163b2c39 27332 sox_14.4.2+git20190427-1+deb10u1.debian.tar.xz 77f061db06ab2e577e2ec2f221eb69a5e5de2eb92a6992cc9b57b0cb4bca843b 13884 sox_14.4.2+git20190427-1+deb10u1_amd64.buildinfo Files: 4deb0b78b081c2931b905119bb84c53e 2880 sound optional sox_14.4.2+git20190427-1+deb10u1.dsc ba804bb1ce5c71dd484a102a5b27d0dd 935449 sound optional sox_14.4.2+git20190427.orig.tar.bz2 70f8f14e0e29c14c7f56c1451b7e43ad 27332 sound optional sox_14.4.2+git20190427-1+deb10u1.debian.tar.xz a19fbd80f25751a811bf9010dcef0c39 13884 sound optional sox_14.4.2+git20190427-1+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETMLS2QqNFlTb+HOqLRqqzyREREIFAmPlOZAACgkQLRqqzyRE REIW6RAAnHov5JIuLaMeqIt4POWAL9pMmh380WHYeVNrS7F5TgY6zYlJ3AQF1ggu BpLbKbdqdCaUpM8bAYoCFGuY4uLchW9l/n6cAPgcUfWCS13XMv607tJV4zrR+iAX pdDmLTllLzkzKaWBbMw9LIkJsjFS5MvD4b50b3ROEn+z9SuXR8xFd80Vdg5Uq0ht Afp+OWfnC5+SSqYb1ucqxPECLHK2Ug4ZYHxz8l4UH5b5Il90Hpf/VEOj8zU0ToIA 2cQd1doQTG4Cpw4UapEK2KqxELRCBPa5x0jG2ufoL9/DD7GVdgcDmMnXQIe5XVaw hGP7JFh9ATrJr6sdoDi/vBnu4ZN1JagB2Bj+75nKAQbaLZrH6Lpi//YPlEeUuM8q uJuXMKfbNX2XQpoZPPO96F1eNKRmuaPv+naWd0Idumj84uosBfthjYZu4BltiKyv lQPotPkwgzFAhpB5sBC3QYwDnbXM7Zr2Eo62Mv3oMCrJULwZMUepoTZMOPfrXn+9 asyhuocJbFlyZfjsncDeYhjLisIXAP3brpke0P9x/Pa9BTdV5g2xwdXrzmq+bajr OVYLl/WrJuqxiCi9YKTUvNb1rJX15Q40TJpEXGHVTlKbPYK9WL13YHhfgcSjoYQ0 KmF/Abwb6MrdnZhMapjbstnt81yn2iyLQHqkv3/UeFrGicTww74= =KZO1 -----END PGP SIGNATURE-----
