tocsin

Debian/sox: high 8.8

A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buf

Action: Upgrade sox to 14.4.2+git20190427-3.1 or later.

Affected

introducedfixedlast affected
014.4.2+git20190427-3.1-

Fixed versions

14.4.2+git20190427-3.1

Sources

published · modified · JSON