Debian Package Tracker
Register | Log in
Subscribe

sox

Swiss army knife of sound processing

Choose email to subscribe with

general
  • source: sox (main)
  • version: 14.4.2+git20190427-3
  • maintainer: Debian Multimedia Maintainers (archive) (DMD)
  • uploaders: Jaromír Mikeš [DMD] – Dennis Braun [DMD]
  • arch: any
  • std-ver: 4.6.0
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 14.4.1-5+deb9u2
  • oldstable: 14.4.2+git20190427-1
  • stable: 14.4.2+git20190427-2
  • testing: 14.4.2+git20190427-3
  • unstable: 14.4.2+git20190427-3
versioned links
  • 14.4.1-5+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 14.4.2+git20190427-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 14.4.2+git20190427-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 14.4.2+git20190427-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libsox-dev
  • libsox-fmt-all
  • libsox-fmt-alsa
  • libsox-fmt-ao
  • libsox-fmt-base
  • libsox-fmt-mp3
  • libsox-fmt-oss
  • libsox-fmt-pulse
  • libsox3
  • sox (10 bugs: 0, 4, 6, 0)
action needed
6 security issues in stretch high

There are 6 open security issues in stretch.

5 important issues:
  • CVE-2021-3643: A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
  • CVE-2021-23210:
  • CVE-2021-40426: A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-31650: In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
  • CVE-2022-31651: In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
1 ignored issue:
  • CVE-2019-13590: An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid pointer, leading to a NULL pointer dereference on lsx_readbuf in formats_i.c.
Created: 2022-03-24 Last update: 2022-05-27 07:09
5 security issues in sid high

There are 5 open security issues in sid.

5 important issues:
  • CVE-2021-3643: A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
  • CVE-2021-23210:
  • CVE-2021-40426: A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-31650: In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
  • CVE-2022-31651: In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
Created: 2022-03-24 Last update: 2022-05-27 07:09
6 security issues in buster high

There are 6 open security issues in buster.

5 important issues:
  • CVE-2021-3643: A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
  • CVE-2021-23210:
  • CVE-2021-40426: A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-31650: In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
  • CVE-2022-31651: In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
1 ignored issue:
  • CVE-2019-13590: An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid pointer, leading to a NULL pointer dereference on lsx_readbuf in formats_i.c.
Created: 2021-02-19 Last update: 2022-05-27 07:09
5 security issues in bullseye high

There are 5 open security issues in bullseye.

5 important issues:
  • CVE-2021-3643: A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
  • CVE-2021-23210:
  • CVE-2021-40426: A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-31650: In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
  • CVE-2022-31651: In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
Created: 2022-03-24 Last update: 2022-05-27 07:09
5 security issues in bookworm high

There are 5 open security issues in bookworm.

5 important issues:
  • CVE-2021-3643: A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
  • CVE-2021-23210:
  • CVE-2021-40426: A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-31650: In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
  • CVE-2022-31651: In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
Created: 2022-03-24 Last update: 2022-05-27 07:09
lintian reports 1 error high
Lintian reports 1 error about this package. You should make the package lintian clean getting rid of them.
Created: 2020-07-29 Last update: 2020-08-22 06:06
Depends on packages which need a new maintainer normal
The packages that sox depends on which need a new maintainer are:
  • libgsm (#1009975)
    • Depends: libgsm1 libgsm1
    • Build-Depends: libgsm1-dev
Created: 2022-04-21 Last update: 2022-05-29 09:37
Build log checks report 1 warning low
Build log checks report 1 warning
Created: 2016-04-07 Last update: 2016-04-07 19:01
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.1 instead of 4.6.0).
Created: 2022-05-11 Last update: 2022-05-11 23:24
news
[rss feed]
  • [2022-04-11] sox 14.4.2+git20190427-3 MIGRATED to testing (Debian testing watch)
  • [2022-04-06] Accepted sox 14.4.2+git20190427-3 (source) into unstable (Sebastian Ramacher)
  • [2020-02-14] sox 14.4.2+git20190427-2 MIGRATED to testing (Debian testing watch)
  • [2020-02-09] Accepted sox 14.4.2+git20190427-2 (source) into unstable (Dennis Braun) (signed by: Sebastian Ramacher)
  • [2019-08-23] Accepted sox 14.4.1-5+deb9u2 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Moritz Mühlenhoff)
  • [2019-05-28] Accepted sox 14.4.1-5+deb8u4 (source amd64) into oldstable (Emilio Pozuelo Monfort)
  • [2019-05-03] sox 14.4.2+git20190427-1 MIGRATED to testing (Debian testing watch)
  • [2019-04-27] Accepted sox 14.4.2+git20190427-1 (source amd64) into unstable (Tiago Bortoletto Vaz)
  • [2019-03-05] Accepted sox 14.4.1-5+deb8u3 (source amd64) into oldstable (Hugo Lefeuvre)
  • [2019-02-28] Accepted sox 14.4.1-5+deb8u2 (source amd64) into oldstable (Hugo Lefeuvre)
  • [2019-02-24] Accepted sox 14.4.1-5+deb8u1 (source amd64) into oldstable (Adrian Bunk)
  • [2019-02-04] Accepted sox 14.4.1-5+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
  • [2017-12-24] sox 14.4.2-3 MIGRATED to testing (Debian testing watch)
  • [2017-12-18] Accepted sox 14.4.2-3 (source) into unstable (Jaromír Mikeš)
  • [2017-11-30] Accepted sox 14.4.0-3+deb7u2 (source amd64) into oldoldstable (Markus Koschany)
  • [2017-11-29] sox 14.4.2-2 MIGRATED to testing (Debian testing watch)
  • [2017-11-24] Accepted sox 14.4.2-2 (source) into unstable (Jaromír Mikeš)
  • [2017-11-19] Accepted sox 14.4.2-1 (source amd64) into experimental, experimental (Jaromír Mikeš) (signed by: Sebastian Ramacher)
  • [2015-01-03] Accepted sox 14.3.1-1+deb6u1 (source i386) into squeeze-lts (Thorsten Alteholz)
  • [2014-12-30] sox 14.4.1-5 MIGRATED to testing (Britney)
  • [2014-12-24] Accepted sox 14.4.1-5 (source amd64) into unstable (Pascal Giard)
  • [2014-12-24] Accepted sox 14.4.0-3+deb7u1 (source) into proposed-updates->stable-new, proposed-updates (Pascal Giard)
  • [2014-06-01] sox 14.4.1-4 MIGRATED to testing (Debian testing watch)
  • [2014-05-22] Accepted sox 14.4.1-4 (source amd64) (Pascal Giard)
  • [2013-05-05] sox 14.4.1-3 MIGRATED to testing (Debian testing watch)
  • [2013-04-16] Accepted sox 14.4.1-3 (source amd64) (Pascal Giard)
  • [2013-02-23] Accepted sox 14.4.1-2 (source amd64) (Pascal Giard)
  • [2013-02-12] Accepted sox 14.4.1-1 (source amd64) (Pascal Giard)
  • [2013-01-19] Accepted sox 14.4.0-5 (source amd64) (Pascal Giard)
  • [2013-01-18] Accepted sox 14.4.0-4 (source amd64) (Pascal Giard)
  • 1
  • 2
bugs [bug history graph]
  • all: 13
  • RC: 0
  • I&N: 7
  • M&W: 6
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (1, 0)
  • buildd: logs, checks, clang, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • screenshots
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 14.4.2+git20190427-3
  • 4 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing