Skip to content
OpenAdvisories
High ALAS2-2026-3129 1 CVE

Important: sox security update (Amazon Linux 2)

Published Jan 21, 2026 · Updated Jan 21, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-50798: SoX 14.4.2 contains a division by zero vulnerability when handling WAV files that can cause program crashes. Attackers can trigger a floating point exception by providing a specially crafted WAV file that causes arithmetic errors during sound file processing.

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 sox 0:14.4.1-7.amzn2.0.4
Amazon Linux · 2 sox-debuginfo 0:14.4.1-7.amzn2.0.4
Amazon Linux · 2 sox-devel 0:14.4.1-7.amzn2.0.4

Vulnerabilities 1

  • Unscored —
    CVE-2022-50798 Rejected

    This candidate is a duplicate of CVE-2017-11359.

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50798.html