File _patchinfo of Package patchinfo.18152

<patchinfo incident="18152">
  <issue tracker="cve" id="2022-31650"/>
  <issue tracker="cve" id="2023-32627"/>
  <issue tracker="cve" id="2023-34432"/>
  <issue tracker="cve" id="2023-34318"/>
  <issue tracker="cve" id="2021-40426"/>
  <issue tracker="cve" id="2019-13590"/>
  <issue tracker="cve" id="2022-31651"/>
  <issue tracker="cve" id="2021-23159"/>
  <issue tracker="cve" id="2021-33844"/>
  <issue tracker="cve" id="2021-3643"/>
  <issue tracker="bnc" id="1212061">VUL-0: CVE-2023-32627: sox: floating point exception in src/voc.c</issue>
  <issue tracker="bnc" id="1212060">VUL-0: CVE-2023-26590: sox: floating point exception in src/aiff.c</issue>
  <issue tracker="bnc" id="1212063">VUL-0: CVE-2023-34432: sox: heap-buffer-overflow in src/formats_i.c</issue>
  <issue tracker="bnc" id="1212062">VUL-0: CVE-2023-34318: sox: heap-buffer-overflow in src/hcom.c</issue>
  <packager>tiwai</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for sox</summary>
  <description>This update for sox fixes the following issues:

- Apply various fix patches taken from Debian package;
  it fixes also other entries (CVE-2022-31650 boo#1212060
  CVE-2023-34318 boo#1212062 CVE-2023-34432 boo#1212063)
- Fix floating point exception in src/voc.c (CVE-2023-32627 boo#1212061)
</description>
</patchinfo>
openSUSE Build Service is sponsored by