Debian Security Advisory

DLA-128-1 sox -- LTS security update

Date Reported:
03 Jan 2015
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 773720.
In Mitre's CVE dictionary: CVE-2014-8145.
More information:

Michele Spagnuolo of the Google Security Team dicovered two heap-based buffer overflows in SoX, the Swiss Army knife of sound processing programs. A specially crafted wav file could cause an application using SoX to crash or, possibly, execute arbitrary code.

For Debian 6 Squeeze, these issues have been fixed in sox version 14.3.1-1+deb6u1