Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: unblock
Dear Release Team, Please unblock package sox. I've pushed the recent upstream commits for the following security fixes: CVE-2019-8354: https://sourceforge.net/p/sox/code/ci/f70911261a84333b077c29908e1242f69d7439eb/ CVE-2019-8355: https://sourceforge.net/p/sox/code/ci/f8587e2d50dad72d40453ac1191c539ee9e50381/ CVE-2019-8356: https://sourceforge.net/p/sox/code/ci/b7883ae1398499daaa926ae6621f088f0f531ed8/ CVE-2019-8357: https://sourceforge.net/p/sox/code/ci/2ce02fea7b350de9ddfbcf542ba4dd59a8ab255b/ Each fix is provided in a patch file: 0016-CVE-2019-8354.patch 0017-CVE-2019-8355.patch 0018-CVE-2019-8356.patch 0019-CVE-2019-8357.patch You might notice that I had to make a few modifications to avoid major changes in the current source. Diff is attached. unblock sox/4.4.2+git20190427-1 Thanks, -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
