Hash: SHA512
Package : sox
Version : 14.4.0-3+deb7u2
CVE ID : CVE-2017-11332 CVE-2017-11358 CVE-2017-11359
CVE-2017-15370 CVE-2017-15371 CVE-2017-15372
CVE-2017-15642
Debian Bug : 870328 878810 878809 878808 882236 882144
Various security vulnerabilities were discovered in sox, a command
line utility to convert audio formats, that may lead to a
denial-of-service (application crash / infinite loop) or memory
corruptions by processing a malformed input file.
For Debian 7 "Wheezy", these problems have been fixed in version
14.4.0-3+deb7u2.
We recommend that you upgrade your sox packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS