FEDORA-2018-ec93095a73 — security update for sox

stable

sox-14.4.2.0-16.fc27

FEDORA-2018-ec93095a73 created by jkucera 4 years ago for Fedora 27

Security fix for CVE-2017-15372, CVE-2017-15642.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2018-ec93095a73

This update has been submitted for testing by jkucera.

4 years ago

This update has been pushed to testing.

4 years ago

pwalter commented & provided feedback 4 years ago

karma

Works

filiperosset commented & provided feedback 4 years ago

karma

no regressions noted

smithp commented & provided feedback 4 years ago

karma

This update has been submitted for batched by bodhi.

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been submitted for batched by jkucera.

4 years ago

Bodhi is unable to request this update for stabilization: invalid syntax (ssl.py, line 7)

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

sox-14.4.2.0-16.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

BZ#1500553 it is a stack-overflow vulnerability in lsx_ms_adpcm_block_expand_i ( in adpcm.c:126 )

BZ#1510919 CVE-2017-15372 sox: Stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function

BZ#1510923 CVE-2017-15642 sox: Use-after-free in lsx_aiffstartread

BZ#1510925 CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 CVE-2017-15642 sox: various flaws [fedora-all]

sox-14.4.2.0-16.fc27

How to install

Automated Test Results