Changelog for sox-14.4.2.0-28.fc31.i686.rpm :

* Wed Jan 29 2020 Jiri Kucera - 14.4.2.0-28- fix CVE-2017-18189 resolves #1545867
* Wed Jan 29 2020 Jiri Kucera - 14.4.2.0-27- remove %check (we use Fedora CI instead in a future)
* Fri Jul 26 2019 Fedora Release Engineering - 14.4.2.0-26- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Feb 03 2019 Fedora Release Engineering - 14.4.2.0-25- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering - 14.4.2.0-24- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 15 2018 Richard Shaw - 14.4.2.0-23- Add twolame-devel to build requirements now that it\'s in Fedora.
* Wed Jun 06 2018 Jiri Kucera - 14.4.2.0-22- added patch that fixes: + \"divide by zero in startread function in wav.c\" (CVE-2017-11332) + \"invalid memory read in read_samples function in hcom.c\" (CVE-2017-11358) + \"divide by zero in wavwritehdr function in wav.c\" (CVE-2017-11359) resolves #1480674, #1480675, #1480676, and #1480678
* Sat Jun 02 2018 Jiri Kucera - 14.4.2.0-21- fix hunks in patches- prevents division by zero in src/ao.c + fixes/prevents \"sox killed by SIGFPE (signal 8)\" kind of bugs that appear randomly, depending on reporter\'s HW/environment/OS components + related bugs: #1309426, #1226675, #1540762, #1492910
* Wed Mar 21 2018 Jiri Kucera - 14.4.2.0-20- added patch that fixes WAV to HCOM conversion abortion on 64 bit big endian machines + resolves #1558887
* Mon Mar 19 2018 Jiri Kucera - 14.4.2.0-19- CVEs presence tests beakerized and moved to tests/ directory as CI tests- %check section: creating of additional binaries for testing was replaced by the libsox binary patch workaround hack; during the testing the hardcoded path to the directory with sox plugins is replaced for non-root alternative and hence running the tests under the mock is possible (before the binary patching, the backup of libsox is made, and at the end of tests it is restored); this decrease the build time of the package, but may increase the fragility of the package build process (future features in gcc toolchain may make the binary patching impossible/not working)
* Thu Feb 22 2018 Jiri Kucera - 14.4.2.0-18- Added missing gcc dependency
* Tue Feb 06 2018 Jiri Kucera - 14.4.2.0-17- SOX_PLUGINS environment variable is now used only while running %check during the package building; SOX_PLUGINS are now no longer available to users
* Thu Feb 01 2018 Jiri Kucera - 14.4.2.0-16- added patch that disables hcom conversion tests on big endian architectures due to SIGABRT issues
* Tue Jan 30 2018 Jiri Kucera - 14.4.2.0-15- added patch that fixes stack-overflow vulnerability in lsx_ms_adpcm_block_expand_i (CVE-2017-15372) + resolves #1500553, #1510919- added patch that fixes use-after-free in lsx_aiffstartread (CVE-2017-15642) + resolves #1510923- added patch that fixes incorrect FSF address in src/ladspa.h- added patch that introduces SOX_PLUGINS environment variable that overrides standard sox location for plugins- added patch that inserts $(DESTDIR) before ${bindir} in src/Makefile.am installcheck target- added tests that checks if previously fixed bugs remain fixed in newer releases- spec file changes: + suppressed rpmlint warning about bad Source URL + added comments to security patches + in %description: added missing sentence period + in %prep: suppressed \"%setup is not quite\" rpmlint warning + in %install: removed redundant slashes before %{_libdir} + added %check section