Skip to content
OpenAdvisories
High ALAS2023-2026-1369 1 CVE

Important: sox security update (Amazon Linux 2023)

Published Jan 23, 2026 · Updated Jan 23, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-50798: SoX 14.4.2 contains a division by zero vulnerability when handling WAV files that can cause program crashes. Attackers can trigger a floating point exception by providing a specially crafted WAV file that causes arithmetic errors during sound file processing.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 sox 0:14.4.2.0-1.amzn2023
Amazon Linux · 2023 sox-debuginfo 0:14.4.2.0-1.amzn2023
Amazon Linux · 2023 sox-debugsource 0:14.4.2.0-1.amzn2023
Amazon Linux · 2023 sox-devel 0:14.4.2.0-1.amzn2023

Vulnerabilities 1

  • Unscored —
    CVE-2022-50798 Rejected

    This candidate is a duplicate of CVE-2017-11359.

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-50798.html