baserev update by copy to link target

• Files Changed
• Browse Source

- Apply various fix patches taken from Debian package;
  it fixes also other entries (CVE-2022-31650 bsc#1212060
  CVE-2023-34318 bsc#1212062 CVE-2023-34432 bsc#1212063):
  CVE-2019-13590.patch
  CVE-2021-3643.patch
  CVE-2021-23159.patch
  CVE-2021-33844.patch
  CVE-2021-40426.patch
  CVE-2022-31650.patch
  CVE-2022-31651.patch
- Fix floating point exception in src/voc.c (CVE-2023-32627 bsc#1212061):
  CVE-2023-32627.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Use file-devel instead of libmagic to fix build in Leap

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Further modernise specfile

• Files Changed
• Browse Source

- Remove unused ffmpeg from BuildRequires
- Remove conditionals for amrnb/amrwb
- Use newer specfile constructs

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Added patches:
  * CVE-2017-11332.patch: Fixed the startread function in wav.c, which allowed
    remote attackers to cause a DoS (divide-by-zero) via a crafted wav file.
    (CVE-2017-11332 bsc#1081140)
  * CVE-2017-11358.patch: Fixed the read_samples function in hcom.c, which
    allowed remote attackers to cause a DoS (invalid memory read) via a crafted
    hcom file. (CVE-2017-11358 bsc#1081141)
  * CVE-2017-11359.patch: Fixed the wavwritehdr function in wav.c, which
    allowed remote attackers to cause a DoS (divide-by-zero) when converting a
    a crafted snd file to a wav file. (CVE-2017-11359 bsc#1081142)
  * CVE-2017-15370.patch: Fixed a heap-based buffer overflow in the ImaExpandS
    function of ima_rw.c, which allowed remote attackers to cause a DoS during
    conversion of a crafted audio file. (CVE-2017-15370 bsc#1063439)
  * CVE-2017-15371.patch: Fixed an assertion abort in the function
    sox_append_comment() in formats.c, which allowed remote attackers to cause
    a DoS during conversion of a crafted audio file. (CVE-2017-15371
    bsc#1063450)
  * CVE-2017-15372.patch: Fixed a stack-based buffer overflow in the
    lsx_ms_adpcm_block_expand_i function of adpcm.c, which allowed remote
    attackers to cause a DoS during conversion of a crafted audio file.
    (CVE-2017-15372 bsc#1063456)
  * CVE-2017-15642.patch: Fixed an Use-After-Free vulnerability in
    lsx_aiffstartread in aiff.c, which could be triggered by an attacker by
    providing a malformed AIFF file. (CVE-2017-15642 bsc#1064576)
  * CVE-2017-18189.patch: Fixed a NULL pointer dereference triggered by a
    corrupt header specifying zero channels in the startread function in
    xa.c, which allowed remote attackers to cause a DoS (CVE-2017-18189
    bsc#1081146).
- Removed sox-doublefree.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- sox-doublefree.patch: initialize comment, it might
  get returned back with OK. (bsc#1064576 CVE-2017-15642)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Enable lame/mad/twolame unconditionally
- Remove ffmpeg/opus conditional because it is always present

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Fixup buildrequires

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to 14.4.2
- Drop sox-14.4.0-ocloexec.patch as it brings little enhancement 
  and there has been no activity at upstreaming it
- Enable ffmpeg and opus by default

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 14.4.1
  o Fix pipe file-type detection regression
  o MAUD write fixes
  o Fix crash when seeking within a FLAC file
  o Fix Ogg Vorbis files with certain numbers of channels being
    truncated
  o Fix reading 64-bit float WAVs
  o Fix potential buffer overrun when writing FLAC files directly via
    sox_write()
  o Check whether pulseaudio is available before choosing it as
    default
  o Restore 8 seconds default for spectrogram, if the input length is
    not known
  o Set output length for splice to unknown instead of 0
  o Increase maximum width for spectrograms
  o Fix memory leaks in LADSPA effect
  o Fix hang in several effects (rate, tempo, and those based on
    dft_filter) when processing long files
  o Prevent (m)compand from tampering with their arguments
  o Fix input length calculation for combine methods other than
    concatenate
  o Fix to configure.ac to work with Autoconf 2.69
- Rebase sox-14.4.0-ocloexec.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source