Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 5356-2] sox regression update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 5356-2] sox regression update


Chronologisch Thread  
  • From: Moritz Muehlenhoff <jmm AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 5356-2] sox regression update
  • Date: Fri, 17 Mar 2023 09:50:52 +0000
  • Authentication-results: mail.piratenpartei.de; dkim=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
  • List-archive: https://lists.debian.org/msgid-search/ZBQ3/E2yxVPMFmiq AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=3lUs523Ln3MvIBKRH8+2NkB0LrMdz5WMqZkZbV7WhqQ=; b=Mc sIp1qgv13rCu9mDvQsp2W+Rf8shgdVs8Mncs800C1m7y3DfFaXD5wNDpZ2ZPTxmF5eMgkptMT5cHc Yvjz3agvXKHdzvsAhdZK/jGjd8CrHwBELZ0mT8d692lIvu56c7LgmkKH0TgtNTaFsKwqFt34M7/mi HNLtgvkycsSu/QCLv24vufFrWpMIOIlTdeEEq6rjBnLsxYH8CWbX87s/8RdlkZd3XU0EIyh4cbKBa tj4e6FopOlwfjq7aIkWRB6Ma+xhEoTbCXPXXjxt3odEuIAwD3cMHoPwk4Tz9QJSXt4nHEqnWBuDiA tEk1tLoIpmlDWA2NOpgZQigIA96YfAOw==;
  • Old-return-path: <jmm AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Fri, 17 Mar 2023 09:51:19 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <FyjiRqeC94L.A.ndH.XgDFkB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5356-2 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
March 17, 2023 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : sox
Debian Bug : 1032082

One of the security fixes released as DSA 5356 introduced a regression
in the processing of specific WAV files. Updated sox packages are
available to correct this issue.

For the stable distribution (bullseye), these problems have been fixed in
version 14.4.2+git20190427-2+deb11u2.

We recommend that you upgrade your sox packages.

For the detailed security status of sox please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/sox

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=06P7
-----END PGP SIGNATURE-----



  • [IT-SecNots] [SECURITY] [DSA 5356-2] sox regression update, Moritz Muehlenhoff, 17.03.2023

Archiv bereitgestellt durch MHonArc 2.6.24.

Seitenanfang