Projetos/rpi-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/sox: add CVE trailer in patches

Browse Source 
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patches header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9d0e4db4c458ebe202b32f52ca96ca2e3386a1b6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2025-12-29 10:07:06 +01:00
parent 618b0c6822
commit ed0fb7130f
6 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/sox/0006-voc-word-width-should-never-be-0-to-avoid-division-b.patch
View File

@@ -8,6 +8,8 @@ Bug-Debian: https://bugs.debian.org/1010374
This patch fixes both CVE-2021-3643 and CVE-2021-23210.
CVE: CVE-2021-3643
CVE: CVE-2021-23210
Upstream: https://sourceforge.net/p/sox/bugs/351/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---

4
package/sox/0007-hcom-validate-dictsize.patch
View File

@@ -10,6 +10,10 @@ Bug-Debian: https://bugs.debian.org/1021134
This patch fixes both CVE-2021-23159 and CVE-2021-23172.
CVE: CVE-2021-23159
CVE: CVE-2021-23172
CVE: CVE-2023-34318
CVE: CVE-2023-34432
Upstream: https://sourceforge.net/p/sox/bugs/350/
Upstream: https://sourceforge.net/p/sox/bugs/352/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>

1
package/sox/0008-phere-avoid-integer-underflow.patch
View File

@@ -7,6 +7,7 @@ Link: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1434
Bug: https://sourceforge.net/p/sox/bugs/362/
Bug-Debian: https://bugs.debian.org/1012138
CVE: CVE-2021-40426
Upstream: https://sourceforge.net/p/sox/bugs/362/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---

2
package/sox/0009-formats-aiff-reject-implausibly-large-number-of-chan.patch
View File

@@ -6,6 +6,8 @@ Subject: [PATCH] formats+aiff: reject implausibly large number of channels
Bug: https://sourceforge.net/p/sox/bugs/360/
Bug-Debian: https://bugs.debian.org/1012516
CVE: CVE-2022-31650
CVE: CVE-2023-26590
Upstream: https://sourceforge.net/p/sox/bugs/360/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---

1
package/sox/0010-formats-reject-implausible-rate.patch
View File

@@ -6,6 +6,7 @@ Subject: [PATCH] formats: reject implausible rate
Bug: https://sourceforge.net/p/sox/bugs/360/
Bug-Debian: https://bugs.debian.org/1012516
CVE: CVE-2022-31651
Upstream: https://sourceforge.net/p/sox/bugs/360/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---

1
package/sox/0011-CVE-2023-32627-Filter-null-sampling-rate-in-VOC-code.patch
View File

@@ -10,6 +10,7 @@ bug-redhat: https://bugzilla.redhat.com/show_bug.cgi?id=2212282
bug-debian: https://bugs.debian.org/1041112
bug-debian-security: https://security-tracker.debian.org/tracker/CVE-2023-32627
CVE: CVE-2023-32627
Upstream: https://sourceforge.net/p/sox/bugs/369/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---