[UCI-Linux] Bill Nottingham: [SECURITY] Fedora Core 1 Update: sox-12.17.4-4.fc1

Mike Iglesias IGLESIAS at uci.edu
Wed Jul 28 09:48:14 PDT 2004


------- Forwarded Message

Return-Path: fedora-announce-list-bounces at redhat.com
Delivery-Date: Wed Jul 28 09:40:45 2004
Received: from mta4.service.uci.edu (mta4.service.uci.edu [128.200.59.169])
	by draco.acs.uci.edu (8.12.8/8.12.8) with ESMTP id i6SGegiK029524
	for <iglesias at draco.acs.uci.edu>; Wed, 28 Jul 2004 09:40:42 -0700
Received: (from daemon at localhost)
	by mta4.service.uci.edu (8.11.4-20030923/8.11.2) id i6SGefo18330
	for iglesias at draco.acs.uci.edu.xyzzy; Wed, 28 Jul 2004 09:40:41 -0700 (PDT)
Received: (from daemon at localhost)
	by mta4.service.uci.edu (8.11.4-20030923/8.11.2) id i6SGeeN18308
	for iglesias at uci.edu.xyzzy; Wed, 28 Jul 2004 09:40:40 -0700 (PDT)
Received: from hormel.redhat.com (hormel.redhat.com [209.132.177.30])
	by mta4.service.uci.edu (8.11.4-20030923/8.11.2) with ESMTP id i6SGdxL17415
	for <iglesias at uci.edu>; Wed, 28 Jul 2004 09:39:59 -0700 (PDT)
Received: from listman.util.phx.redhat.com (listman.util.phx.redhat.com [10.8.4.110])
	by hormel.redhat.com (Postfix) with ESMTP
	id 10A9E739FD; Wed, 28 Jul 2004 12:39:59 -0400 (EDT)
Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com
	[172.16.52.254])
	by listman.util.phx.redhat.com (8.12.10/8.12.10) with ESMTP id
	i6SGcCXW019549
	for <fedora-announce-list at listman.util.phx.redhat.com>;
	Wed, 28 Jul 2004 12:38:12 -0400
Received: (from mail at localhost)
	by int-mx1.corp.redhat.com (8.11.6/8.11.6) id i6SGcCT02590
	for fedora-announce-list at listman.util.phx.redhat.com;
	Wed, 28 Jul 2004 12:38:12 -0400
Received: from nostromo.devel.redhat.com (nostromo.devel.redhat.com
	[172.16.56.99])
	by int-mx1.corp.redhat.com (8.11.6/8.11.6) with ESMTP id i6SGcCa02586
	for <fedora-announce-list at redhat.com>; Wed, 28 Jul 2004 12:38:12 -0400
Received: from nostromo.devel.redhat.com (localhost.localdomain [127.0.0.1])
	by nostromo.devel.redhat.com (8.13.0/8.12.8) with ESMTP id
	i6SGcBBG017050
	for <fedora-announce-list at redhat.com>; Wed, 28 Jul 2004 12:38:12 -0400
Received: (from notting at localhost)
	by nostromo.devel.redhat.com (8.13.0/8.13.0/Submit) id i6SGcBOn017045
	for fedora-announce-list at redhat.com; Wed, 28 Jul 2004 12:38:11 -0400
Date: Wed, 28 Jul 2004 12:38:11 -0400
From: Bill Nottingham <notting at redhat.com>
To: fedora-announce-list at redhat.com
Message-ID: <20040728163810.GA17033 at nostromo.devel.redhat.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.1i
X-loop: fedora-announce-list at redhat.com
X-Mailman-Approved-At: Wed, 28 Jul 2004 12:39:54 -0400
Subject: [SECURITY] Fedora Core 1 Update: sox-12.17.4-4.fc1
X-BeenThere: fedora-announce-list at redhat.com
X-Mailman-Version: 2.1.5
Precedence: junk
Reply-To: fedora-list at redhat.com
List-Id: Announcements related to the Fedora Project
	<fedora-announce-list.redhat.com>
List-Unsubscribe: <http://www.redhat.com/mailman/listinfo/fedora-announce-list>, 
	<mailto:fedora-announce-list-request at redhat.com?subject=unsubscribe>
List-Archive: </archives/fedora-announce-list>
List-Post: <mailto:fedora-announce-list at redhat.com>
List-Help: <mailto:fedora-announce-list-request at redhat.com?subject=help>
List-Subscribe: <http://www.redhat.com/mailman/listinfo/fedora-announce-list>, 
	<mailto:fedora-announce-list-request at redhat.com?subject=subscribe>
Sender: fedora-announce-list-bounces at redhat.com
Errors-To: fedora-announce-list-bounces at redhat.com
X-UCIRVINE-MailScanner: No viruses found
X-DRACO-MailScanner: Not checked for viruses

- ---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-235
2004-07-28
- ---------------------------------------------------------------------

Product     : Fedora Core 1
Name        : sox
Version     : 12.17.4                      
Release     : 4.fc1                  
Summary     : A general purpose sound file conversion tool.
Description :
SoX (Sound eXchange) is a sound file format converter SoX can convert
between many different digitized sound formats and perform simple
sound manipulation functions, including sound effects.

- ---------------------------------------------------------------------
Update Information:

Updated sox packages that fix buffer overflows in the WAV file handling
code are now available.

Buffer overflows existed in the parsing of WAV file header fields. It
was possible that a malicious WAV file could have caused arbitrary code to
be executed when the file was played or converted.  
- ---------------------------------------------------------------------
* Fri Jul 23 2004 Bill Nottingham <notting at redhat.com> 12.17.4-4.fc1

- - add patch for buffer overflow in wav code (CAN-2004-0557, #128158)

* Fri Jul 09 2004 Bill Nottingham <notting at redhat.com> 12.17.4-4

- - add patch for 64-bit problem (#127502)

* Tue Jun 15 2004 Elliot Lee <sopwith at redhat.com>

- - rebuilt

* Tue Mar 02 2004 Elliot Lee <sopwith at redhat.com>

- - rebuilt

* Fri Feb 13 2004 Elliot Lee <sopwith at redhat.com>

- - rebuilt


- ---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

d2b828b280d1d58e8431c0a08c8fc5b4  SRPMS/sox-12.17.4-4.fc1.src.rpm
ce5294466ad88adf14692995782f54c4  x86_64/sox-12.17.4-4.fc1.x86_64.rpm
b30b20e893870aa24e28ddb4eacdb63d  x86_64/sox-devel-12.17.4-4.fc1.x86_64.rpm
76ddef2db37bae4ffb61c7da2f7d3c48  x86_64/debug/sox-debuginfo-12.17.4-4.fc1.x86_64.rpm
eaf9632817dc3655c8df5b36560828a5  i386/sox-12.17.4-4.fc1.i386.rpm
0c999a2a2536ca9bd8ad029787ffa842  i386/sox-devel-12.17.4-4.fc1.i386.rpm
330681c8062dc91f293c501dc513bc08  i386/debug/sox-debuginfo-12.17.4-4.fc1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
- ---------------------------------------------------------------------


- --
fedora-announce-list mailing list
fedora-announce-list at redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list

------- End of Forwarded Message



More information about the UCI-Linux mailing list