Fedora Core Advisory: sox

---

Fedora Update Notification
FEDORA-2004-235
2004-07-28

---

Product : Fedora Core 1
Name : sox
Version : 12.17.4
Release : 4.fc1
Summary : A general purpose sound file conversion tool.

Description :
SoX (Sound eXchange) is a sound file format converter SoX can
convert between many different digitized sound formats and perform
simple sound manipulation functions, including sound effects.

---

Update Information:

Updated sox packages that fix buffer overflows in the WAV file
handling code are now available.

Buffer overflows existed in the parsing of WAV file header
fields. It was possible that a malicious WAV file could have caused
arbitrary code to be executed when the file was played or
converted.

---

• Fri Jul 23 2004 Bill Nottingham <notting@redhat.com>
  12.17.4-4.fc1
  • add patch for buffer overflow in wav code (CAN-2004-0557,
    #128158)
• Fri Jul 09 2004 Bill Nottingham <notting@redhat.com> 12.17.4-4
  • add patch for 64-bit problem (#127502)
• Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
  • rebuilt
• Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
  • rebuilt
• Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
  • rebuilt

---

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

d2b828b280d1d58e8431c0a08c8fc5b4
SRPMS/sox-12.17.4-4.fc1.src.rpm
ce5294466ad88adf14692995782f54c4
x86_64/sox-12.17.4-4.fc1.x86_64.rpm
b30b20e893870aa24e28ddb4eacdb63d
x86_64/sox-devel-12.17.4-4.fc1.x86_64.rpm
76ddef2db37bae4ffb61c7da2f7d3c48
x86_64/debug/sox-debuginfo-12.17.4-4.fc1.x86_64.rpm
eaf9632817dc3655c8df5b36560828a5
i386/sox-12.17.4-4.fc1.i386.rpm
0c999a2a2536ca9bd8ad029787ffa842
i386/sox-devel-12.17.4-4.fc1.i386.rpm
330681c8062dc91f293c501dc513bc08
i386/debug/sox-debuginfo-12.17.4-4.fc1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

---

---

Fedora Update Notification
FEDORA-2004-244
2004-07-28

---

Product : Fedora Core 2
Name : sox
Version : 12.17.4
Release : 4.fc2
Summary : A general purpose sound file conversion tool.

Description :
SoX (Sound eXchange) is a sound file format converter SoX can
convert between many different digitized sound formats and perform
simple sound manipulation functions, including sound effects.

---

Update Information:

Updated sox packages that fix buffer overflows in the WAV file
handling code are now available.

Buffer overflows existed in the parsing of WAV file header
fields. It was possible that a malicious WAV file could have caused
arbitrary code to be executed when the file was played or
converted.

---

• Fri Jul 23 2004 Bill Nottingham <notting@redhat.com>
  12.17.4-4.fc2
  • add patch for buffer overflow in wav code (CAN-2004-0557,
    #128158)
• Fri Jul 09 2004 Bill Nottingham <notting@redhat.com> 12.17.4-4
  • add patch for 64-bit problem (#127502)
• Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
  • rebuilt

---

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

1020f447f7a723dab88d8bc17b364a7b
SRPMS/sox-12.17.4-4.fc2.src.rpm
7ce0bf74c84febdd8013d61a06f3d46c
x86_64/sox-12.17.4-4.fc2.x86_64.rpm
cd8c74016bf280afceb513a20184af93
x86_64/sox-devel-12.17.4-4.fc2.x86_64.rpm
d891be1475f207ce0103fdac5ef832f1
x86_64/debug/sox-debuginfo-12.17.4-4.fc2.x86_64.rpm
a4e7728468e13aa426b7433d0bafb210
i386/sox-12.17.4-4.fc2.i386.rpm
f3eb4728f9a1f20662a54a724ac99486
i386/sox-devel-12.17.4-4.fc2.i386.rpm
765a3b6f295f98448c09ffac0162a01a
i386/debug/sox-debuginfo-12.17.4-4.fc2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

---