News for package sox

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.0
Source: sox
Binary: sox, libsox2, libsox-fmt-base, libsox-fmt-alsa, libsox-fmt-ao, libsox-fmt-ffmpeg, libsox-fmt-mp3, libsox-fmt-oss, libsox-fmt-pulse, libsox-fmt-all, libsox-dev
Architecture: any
Version: 14.4.0-3+deb7u1
Maintainer: Pascal Giard <[email protected]>
Homepage: http://sox.sourceforge.net
Standards-Version: 3.9.1
Build-Depends: cdbs, debhelper (>= 7), ladspa-sdk, libao-dev, libasound2-dev [linux-any], libavcodec-dev (>= 4:0.6.0), libavformat-dev, libavutil-dev, libgsm1-dev, libid3tag0-dev, libltdl3-dev, libmad0-dev, libmagic-dev, libmp3lame-dev, libopencore-amrnb-dev, libopencore-amrwb-dev, libpng-dev, libpulse-dev, libsamplerate0-dev, libsndfile1-dev (>= 1.0.12), libtwolame-dev, libvorbis-dev, libwavpack-dev
Package-List:
 libsox-dev deb libdevel optional arch=any
 libsox-fmt-all deb sound optional arch=any
 libsox-fmt-alsa deb sound optional arch=linux-any
 libsox-fmt-ao deb sound optional arch=any
 libsox-fmt-base deb sound optional arch=any
 libsox-fmt-ffmpeg deb sound optional arch=any
 libsox-fmt-mp3 deb sound optional arch=any
 libsox-fmt-oss deb sound optional arch=any
 libsox-fmt-pulse deb sound optional arch=any
 libsox2 deb sound optional arch=any
 sox deb sound optional arch=any
Checksums-Sha1:
 5a47eee52dc81269eaa17c2f0526e700611e9297 1104124 sox_14.4.0.orig.tar.gz
 887cd76e27b40f5db5198e7c8a6bc40ba7aff7ce 13881 sox_14.4.0-3+deb7u1.diff.gz
Checksums-Sha256:
 2ba4d9f4ce7c0e38417a385902e6396eb8e94867659316679ddab1e100b8cb7d 1104124 sox_14.4.0.orig.tar.gz
 58b2eba60a39a80772868ab9c94f0d991577b211711f2e5a93b94ed75a247234 13881 sox_14.4.0-3+deb7u1.diff.gz
Files:
 42ede45f3cfc48aa97eb9daccedc9b3c 1104124 sox_14.4.0.orig.tar.gz
 1fcf5ee7b8ccb6c4713d05b991272e60 13881 sox_14.4.0-3+deb7u1.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=KxZn
-----END PGP SIGNATURE-----

Changes:
sox (14.4.0-3+deb7u1) wheezy-security; urgency=high

  * Patches to fix memory corruptions on the heap, CVE-2014-8145
    (closes: #773720):
    + 0001-Check-for-minimum-size-sphere-headers.patch
    + 0002-More-checks-for-invalid-MS-ADPCM-blocks.patch

 -- Pascal Giard <[email protected]>  Mon, 22 Dec 2014 12:25:43 -0500