[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1125289: marked as done (sox: Switch to or add sox_ng)

Your message dated Tue, 13 Jan 2026 08:10:13 +0000
with message-id <E1vfZTh-000000002NY-2OI7@fasolo.debian.org>
and subject line Bug#1108753: fixed in sox-ng 14.7.0.3+ds1-1
has caused the Debian Bug report #1108753,
regarding sox: Switch to or add sox_ng
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1108753: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108753
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: sox
Version: 14.4.2+git20190427-5+b3
Severity: important
X-Debbugs-Cc: martinwguy@gmail.com

sox_ng forked from sox.sf.net in May 2024. fixes all 20 or so CVEs,
some of which could lead to code injection using crafted malformed
compressed format files (whic is why I mark it as "important").

It also fixes other bugs, SEGVs and stuff, adds support for dozens
more formats and has grown a few more effects.

There are several release lines, currently at 14.4.5 to 14.7.0
for bug-fix only to more and more new features
and they can be configured to replace the standard sox filenames
with links to _ng or can live side by side. Most distros are deciding
to replace, as it is backwards-compatible, and the latest stable release
seems stable.

https://codeberg.org/sox_ng/sox_ng

I'm on good terms with all the original developers I've contacted and one
has been murmuring for a year or so about importing the _ng fixes to sox.sf.net
but they are presumed busy doing much more interesting things.

Blessings & keep up the good work

   M

-- System Information:
Debian Release: 13.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.43+deb13-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages sox depends on:
ii  libc6             2.41-12
ii  libsox-fmt-alsa   14.4.2+git20190427-5+b3
ii  libsox-fmt-ao     14.4.2+git20190427-5+b3
ii  libsox-fmt-base   14.4.2+git20190427-5+b3
ii  libsox-fmt-oss    14.4.2+git20190427-5+b3
ii  libsox-fmt-pulse  14.4.2+git20190427-5+b3
ii  libsox3           14.4.2+git20190427-5+b3

sox recommends no packages.

Versions of packages sox suggests:
ii  libsox-fmt-all  14.4.2+git20190427-5+b3

-- no debconf information

--- End Message ---
--- Begin Message --- 
Source: sox-ng
Source-Version: 14.7.0.3+ds1-1
Done: Sebastian Ramacher <sramacher@debian.org>

We believe that the bug you reported is fixed in the latest version of
sox-ng, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1108753@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastian Ramacher <sramacher@debian.org> (supplier of updated sox-ng package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 28 Dec 2025 17:53:59 +0100
Binary: libsox-dev libsox-fmt-all libsox-fmt-alsa libsox-fmt-alsa-dbgsym libsox-fmt-ao libsox-fmt-ao-dbgsym libsox-fmt-base libsox-fmt-base-dbgsym libsox-fmt-mp3 libsox-fmt-mp3-dbgsym libsox-fmt-opus libsox-fmt-opus-dbgsym libsox-fmt-oss libsox-fmt-oss-dbgsym libsox-ng3 libsox-ng3-dbgsym sox sox-dbgsym
Source: sox-ng
Architecture: amd64 source
Version: 14.7.0.3+ds1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Sebastian Ramacher <sramacher@debian.org>
Closes: 1108753
Description: 
 libsox-dev - Development files for the SoX library
 libsox-fmt-all - All SoX format libraries
 libsox-fmt-alsa - SoX alsa format I/O library
 libsox-fmt-ao - SoX Libao format I/O library
 libsox-fmt-base - Minimal set of SoX format libraries
 libsox-fmt-mp3 - SoX MP2 and MP3 format library
 libsox-fmt-opus - SoX Opus format library
 libsox-fmt-oss - SoX OSS format I/O library
 libsox-ng3 - SoX library of audio effects and processing
 sox        - Swiss army knife of sound processing
Changes:
 sox-ng (14.7.0.3+ds1-1) experimental; urgency=medium
 .
   * Switch to sox_ng (Closes: #1108753)
   * SONAME bump: libsox3 -> libsox-ng3
   * Apply wrap-and-sort
   * debian/control:
     - Remove old Conflicts+Replaces
     - Bump Standards-Version
     - Remove RRR
     - Add Build-Depends on libebur128-dev, lbiflac-dev, and libfftw3-dev
     - Remove unused libsamplerate-dev build dependency
     - Add myself to Uploaders
   * debian/rules:
     - Remove obsolete workaround for mips*
     - Build to replace sox
   * debian/:
     - Remove outdated documentation
     - Directly include pulseaudio plugin
   * debian/patches: Remove all patches
   * debian/copyright:
     - Remove embedded code copies of libebur128 and libgsm
     - Update for sox_ng
Checksums-Sha1: 
 78dde7ff4f9510219cc8ef01485ef80799c2d964 2338 sox-ng_14.7.0.3+ds1-1.dsc
 ef170405734a5ad8c4944243f980af4d59d19c18 872084 sox-ng_14.7.0.3+ds1.orig.tar.xz
 92da4d059ad42659c77e974fb746716152ba80b3 20284 sox-ng_14.7.0.3+ds1-1.debian.tar.xz
 cac41fb605f7740aeda10bf454c8b8121fc8b075 407400 libsox-dev_14.7.0.3+ds1-1_amd64.deb
 1b9ec14580888528f1a42d8176ca678e0624a3c9 41452 libsox-fmt-all_14.7.0.3+ds1-1_amd64.deb
 b415ecddcb663e92ae6d7c076522965a1261fd0a 15564 libsox-fmt-alsa-dbgsym_14.7.0.3+ds1-1_amd64.deb
 5df116ace8e68a98fd3ff13493d8ba4c00ee837c 47196 libsox-fmt-alsa_14.7.0.3+ds1-1_amd64.deb
 d9771218a5e47043525f22fdc61a6cdeeae950df 7628 libsox-fmt-ao-dbgsym_14.7.0.3+ds1-1_amd64.deb
 f07ca36a8c78e5488607a39daa11b3d0608a8146 43740 libsox-fmt-ao_14.7.0.3+ds1-1_amd64.deb
 0d46ab056454592b97aa615e83451423c13066f3 79376 libsox-fmt-base-dbgsym_14.7.0.3+ds1-1_amd64.deb
 862aaa7dc4e9a0b45d2e7d838fe8c07eede0a559 65168 libsox-fmt-base_14.7.0.3+ds1-1_amd64.deb
 dafcb998238c557afd23aa6666dd3039a343a4da 24344 libsox-fmt-mp3-dbgsym_14.7.0.3+ds1-1_amd64.deb
 e52ec722a96fcca3d420521155b6a8de24e211e1 51716 libsox-fmt-mp3_14.7.0.3+ds1-1_amd64.deb
 99682a3d44a773697dc74e627d9e4c660f4bf89b 8436 libsox-fmt-opus-dbgsym_14.7.0.3+ds1-1_amd64.deb
 4cb37193dae49c42602dcf71dfd916842c6bc55c 44204 libsox-fmt-opus_14.7.0.3+ds1-1_amd64.deb
 2f6f0fa68e5dad680d8960346251d373346e5303 10152 libsox-fmt-oss-dbgsym_14.7.0.3+ds1-1_amd64.deb
 69a735266ab2885a3a634fe42d9174f6986242af 45644 libsox-fmt-oss_14.7.0.3+ds1-1_amd64.deb
 d37f630d77ed9ffa6a277033a94bb20a2bb4d2d3 618284 libsox-ng3-dbgsym_14.7.0.3+ds1-1_amd64.deb
 8ea955f7450c121e94e7227b66070f3bbc534878 330660 libsox-ng3_14.7.0.3+ds1-1_amd64.deb
 0db9a5542c0e87a8deeb5d9fdb0fcde2eefe142e 60036 sox-dbgsym_14.7.0.3+ds1-1_amd64.deb
 7b62dd2726b1db7912e0b603f1383421d343b62f 13559 sox-ng_14.7.0.3+ds1-1_amd64.buildinfo
 01538e74078cf02975c66151c00a28e20440402c 146948 sox_14.7.0.3+ds1-1_amd64.deb
Checksums-Sha256: 
 fddc64bfe74759f460f3277b05d9258d50abd6cab0552eb0d9239605524470f6 2338 sox-ng_14.7.0.3+ds1-1.dsc
 15b969b8c75484cf2f7a106da3509cba728d9e6272425fd908489a6f3fabf63c 872084 sox-ng_14.7.0.3+ds1.orig.tar.xz
 a9c264f928ac325fb6f58efd7c0baf5bf98e06d0a89b4a66055d2be84e132d58 20284 sox-ng_14.7.0.3+ds1-1.debian.tar.xz
 85bd00c830acb26e6f09a2ffe37cd7a52585baf28cfbf3e129104a2027a7a096 407400 libsox-dev_14.7.0.3+ds1-1_amd64.deb
 37c86130c457b3e7f5051bceae307d4477e0f2f2ff33668edf5cc0db63465204 41452 libsox-fmt-all_14.7.0.3+ds1-1_amd64.deb
 d9202da96932807a847084c5afc5c5a843cbd5ddae8da63e905c63ee1ee4bc0a 15564 libsox-fmt-alsa-dbgsym_14.7.0.3+ds1-1_amd64.deb
 cf36a8f28ef33fd27356ec171e3b97d2b88b4e4cd85f4ea3452fbf311df8fa76 47196 libsox-fmt-alsa_14.7.0.3+ds1-1_amd64.deb
 8b65dbed3ee61534e92d98053a1d8bc06ae3f988ddbc28a7c08bdd7377fe48d8 7628 libsox-fmt-ao-dbgsym_14.7.0.3+ds1-1_amd64.deb
 30edcea327fb912b98a27c76385f041f239fe2fc2b2fab5815e70173e01d134a 43740 libsox-fmt-ao_14.7.0.3+ds1-1_amd64.deb
 14ad3933317084055b43332db8f43ff78203db31190019c538ba9348d9508e21 79376 libsox-fmt-base-dbgsym_14.7.0.3+ds1-1_amd64.deb
 a9de23f7b18546c5c7954c555a0312985a3e744c3f5547e6249410169a3bfacc 65168 libsox-fmt-base_14.7.0.3+ds1-1_amd64.deb
 1f67536d6e18e249cb5b2ea9c9dffc7e45da1f3d18a113085bb6d6861c87bcf4 24344 libsox-fmt-mp3-dbgsym_14.7.0.3+ds1-1_amd64.deb
 604853a3a0723e18fe2604d4e95073ab39a750c59c1a6ccf475e462e58c4bd86 51716 libsox-fmt-mp3_14.7.0.3+ds1-1_amd64.deb
 72d44fa99dce39da43c9f3c73ba1912fef803ea67d51430b426372e833702a01 8436 libsox-fmt-opus-dbgsym_14.7.0.3+ds1-1_amd64.deb
 6fb8608bcc2dd3015d6a498acbfbbae2dbba355f53c7e8f237bc9d9ad8cfdd0d 44204 libsox-fmt-opus_14.7.0.3+ds1-1_amd64.deb
 e233fe956b694e46afa623d779c7b6d53940e573f66f68430a3c4af9fa0b44f7 10152 libsox-fmt-oss-dbgsym_14.7.0.3+ds1-1_amd64.deb
 b9f90dc7caa5b4f52becc68be1e5a887ac04018f9a666900e183cde2ff22d296 45644 libsox-fmt-oss_14.7.0.3+ds1-1_amd64.deb
 35f2efa4df6c4a381731392dad29c7d05c89088b4de6583617b71dbe33098fbc 618284 libsox-ng3-dbgsym_14.7.0.3+ds1-1_amd64.deb
 adbf370441c121cf8f69a25249ccb74625eaba2823ceadf248fc375de8b85e86 330660 libsox-ng3_14.7.0.3+ds1-1_amd64.deb
 3f570e0f41c615723c16ba00a7230439872f0b8ac4b01f9827490ebdea38310e 60036 sox-dbgsym_14.7.0.3+ds1-1_amd64.deb
 b155a320b412e250a5ed2e388de9d1b2b1713129f9b5ccb785ff1451eb2a3a6c 13559 sox-ng_14.7.0.3+ds1-1_amd64.buildinfo
 a3c2a6abb3c54cc7c7a5961465fcaaf1c6909b1d42acfe511813aba52dd67966 146948 sox_14.7.0.3+ds1-1_amd64.deb
Files: 
 9b800bc7547b9dc2baf2694af82e26ca 2338 sound optional sox-ng_14.7.0.3+ds1-1.dsc
 b5c57dc4f31a19c0904d66e4d648ecda 872084 sound optional sox-ng_14.7.0.3+ds1.orig.tar.xz
 bdbd6f475fbecf758a50c01c64b8027d 20284 sound optional sox-ng_14.7.0.3+ds1-1.debian.tar.xz
 fed9e9e447562f5fd54f40e187fa7ede 407400 libdevel optional libsox-dev_14.7.0.3+ds1-1_amd64.deb
 53ca6651f74876089d77d429967d3932 41452 libs optional libsox-fmt-all_14.7.0.3+ds1-1_amd64.deb
 3adc4ebc0453a04ccb7f599f16e91bd3 15564 debug optional libsox-fmt-alsa-dbgsym_14.7.0.3+ds1-1_amd64.deb
 e0682398ec96a63384bed7d78064b289 47196 libs optional libsox-fmt-alsa_14.7.0.3+ds1-1_amd64.deb
 beccc94d00d6478c7fbd0ee129b254db 7628 debug optional libsox-fmt-ao-dbgsym_14.7.0.3+ds1-1_amd64.deb
 313b3c2a10ff31fdad97c1b3c770bbee 43740 libs optional libsox-fmt-ao_14.7.0.3+ds1-1_amd64.deb
 bf904ce9caafa01779a6eda625b39b0e 79376 debug optional libsox-fmt-base-dbgsym_14.7.0.3+ds1-1_amd64.deb
 2d5c5b234776748d873b74543a7095d5 65168 libs optional libsox-fmt-base_14.7.0.3+ds1-1_amd64.deb
 b759fbfd1a4db81f88f4cd2a15aa897b 24344 debug optional libsox-fmt-mp3-dbgsym_14.7.0.3+ds1-1_amd64.deb
 3e0280a267a3a3ebc91b66d408b1d337 51716 libs optional libsox-fmt-mp3_14.7.0.3+ds1-1_amd64.deb
 e27dd8ef7d465d053c39deec96f5020a 8436 debug optional libsox-fmt-opus-dbgsym_14.7.0.3+ds1-1_amd64.deb
 e7b4ee2e836eb85c5b20f23cb68ba4ce 44204 libs optional libsox-fmt-opus_14.7.0.3+ds1-1_amd64.deb
 7ef5ca8efb21530861f3f2f3208da78d 10152 debug optional libsox-fmt-oss-dbgsym_14.7.0.3+ds1-1_amd64.deb
 e52a78dfbb703d6a43effd554f6119f8 45644 libs optional libsox-fmt-oss_14.7.0.3+ds1-1_amd64.deb
 43d66ea721dbf6d8c6cde742119e6cff 618284 debug optional libsox-ng3-dbgsym_14.7.0.3+ds1-1_amd64.deb
 0f2af8a4f234d310c1fe81a0541bb086 330660 libs optional libsox-ng3_14.7.0.3+ds1-1_amd64.deb
 107af67c8171242d1f813775f759bf3d 60036 debug optional sox-dbgsym_14.7.0.3+ds1-1_amd64.deb
 5ad836439b88cdca00054bda554e4355 13559 sound optional sox-ng_14.7.0.3+ds1-1_amd64.buildinfo
 afacd3b3d378fcedf6d6c994f65325eb 146948 sound optional sox_14.7.0.3+ds1-1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iIsEARYKADMWIQRCYn6EHZln2oPh+pAhk2s2YA/NiQUCaVFh3RUcc3JhbWFjaGVy
QGRlYmlhbi5vcmcACgkQIZNrNmAPzYkCMwD7B9nNA6NpiNkE9pDKTGJ6MVg3+6O3
y85L+qm2XnJxqZoBAOrwLSFanGNNY5lGEiXmOzp6qJ0sok0g+0ULFJJTBQMG
=Ks0k
-----END PGP SIGNATURE-----

Attachment: pgpthADgZ0rUj.pgp
Description: PGP signature


--- End Message ---
Reply to: