| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libsox3 | Distribution: openSUSE Tumbleweed |
| Version: 14.4.2 | Vendor: openSUSE |
| Release: 9.1 | Build date: Thu Aug 1 20:04:11 2024 |
| Group: Unspecified | Build host: reproducible |
| Size: 631939 | Source RPM: sox-14.4.2-9.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://sox.sourceforge.net | |
| Summary: Sound Conversion Library | |
SOX is intended to be the Swiss Army knife of sound processing tools. It does many things, it just does not do them all well. Sooner or later it will come in very handy. SOX is really only usable day-to-day if you hide the wacky options with one-line shell scripts.
GPL-2.0-or-later AND LGPL-2.1-or-later
* Thu Aug 01 2024 Marcus Meissner <meissner@suse.com>
- sox-gcc14.patch: fixed build with gcc14
* Wed Oct 25 2023 Takashi Iwai <tiwai@suse.com>
- Apply various fix patches taken from Debian package;
it fixes also other entries (CVE-2022-31650 bsc#1212060
CVE-2023-34318 bsc#1212062 CVE-2023-34432 bsc#1212063):
CVE-2019-13590.patch
CVE-2021-3643.patch
CVE-2021-23159.patch
CVE-2021-33844.patch
CVE-2021-40426.patch
CVE-2022-31650.patch
CVE-2022-31651.patch
- Fix floating point exception in src/voc.c (CVE-2023-32627 bsc#1212061):
CVE-2023-32627.patch
* Fri Sep 01 2023 olaf@aepfle.de
- Use file-devel instead of libmagic to fix build in Leap
* Wed May 10 2023 Martin Pluskal <mpluskal@suse.com>
- Further modernise specfile
* Wed May 10 2023 olaf@aepfle.de
- Remove unused ffmpeg from BuildRequires
- Remove conditionals for amrnb/amrwb
- Use newer specfile constructs
* Wed Feb 14 2018 kbabioch@suse.com
- Added patches:
* CVE-2017-11332.patch: Fixed the startread function in wav.c, which allowed
remote attackers to cause a DoS (divide-by-zero) via a crafted wav file.
(CVE-2017-11332 bsc#1081140)
* CVE-2017-11358.patch: Fixed the read_samples function in hcom.c, which
allowed remote attackers to cause a DoS (invalid memory read) via a crafted
hcom file. (CVE-2017-11358 bsc#1081141)
* CVE-2017-11359.patch: Fixed the wavwritehdr function in wav.c, which
allowed remote attackers to cause a DoS (divide-by-zero) when converting a
a crafted snd file to a wav file. (CVE-2017-11359 bsc#1081142)
* CVE-2017-15370.patch: Fixed a heap-based buffer overflow in the ImaExpandS
function of ima_rw.c, which allowed remote attackers to cause a DoS during
conversion of a crafted audio file. (CVE-2017-15370 bsc#1063439)
* CVE-2017-15371.patch: Fixed an assertion abort in the function
sox_append_comment() in formats.c, which allowed remote attackers to cause
a DoS during conversion of a crafted audio file. (CVE-2017-15371
bsc#1063450)
* CVE-2017-15372.patch: Fixed a stack-based buffer overflow in the
lsx_ms_adpcm_block_expand_i function of adpcm.c, which allowed remote
attackers to cause a DoS during conversion of a crafted audio file.
(CVE-2017-15372 bsc#1063456)
* CVE-2017-15642.patch: Fixed an Use-After-Free vulnerability in
lsx_aiffstartread in aiff.c, which could be triggered by an attacker by
providing a malformed AIFF file. (CVE-2017-15642 bsc#1064576)
* CVE-2017-18189.patch: Fixed a NULL pointer dereference triggered by a
corrupt header specifying zero channels in the startread function in
xa.c, which allowed remote attackers to cause a DoS (CVE-2017-18189
bsc#1081146).
- Removed sox-doublefree.patch
* Tue Dec 19 2017 meissner@suse.com
- sox-doublefree.patch: initialize comment, it might
get returned back with OK. (bsc#1064576 CVE-2017-15642)
* Fri Aug 25 2017 olaf@aepfle.de
- Enable lame/mad/twolame unconditionally
- Remove ffmpeg/opus conditional because it is always present
* Mon Mar 06 2017 zaitor@opensuse.org
- Replace libopus-devel with pkgconfig(opusfile) BuildRequires:
this is what configure looks for, and will actually build the
optional opus support as intended.
* Tue Sep 22 2015 mpluskal@suse.com
- Update to 14.4.2
o Add optional support for reading Ogg Opus files.
o Fix for max size text chunks in aiff files.
o Add reading support for RF64 WAV files.
o Work around for libsndfile created RF64 files with invalid
sizes.
o Detect MS ADPCM WAV files with invalid blocks.
o Detect Sphere files with invalid header sizes.
o 'Deemph' can now also be used at 48kHz sample rate.
o 'Rate' now much faster in many cases.
o Allow sending spectrograms to stdout.
o Allow use of Dolph window with spectrograms.
o Allow mixing time and sample-count arguments for the delay
effect, and for spectrogram -S and -d.
o Support multi-channel LADSPA plugins.
o Support infinite repetition with repeat.
o Improved pink noise frequency response in synth.
o Extended syntax for specifying audio positions to several
effects.
o Fix integer overflow in mcompand. [3590093]
o Add optional latency compenstation for LADSPA plugins.
o New -p option for soxi to display sample precision.
o New libsox example6: give explicit output attributes.
o Speed optimization for effects that operate on channels
independently.
o Fix memory leaks.
o Most internal symbols (lsx_*) are no longer exported.
- Drop sox-14.4.0-ocloexec.patch as it brings little enhancement
and there has been no activity at upstreaming it
- Enable ffmpeg and opus by default
/usr/lib64/libsox.so.3 /usr/lib64/libsox.so.3.0.0 /usr/share/licenses/libsox3 /usr/share/licenses/libsox3/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Dec 21 00:03:11 2024