Description
This candidate is a duplicate of CVE-2017-11359.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | sox +1 | 14.4.2.0-1.amzn2023 | ALAS2023-2026-1369 |
| Amazon Linux 2 | sox +1 | 14.4.1-7.amzn2.0.4 | ALAS2-2026-3129 |
Advisories 2
- ALAS2023-2026-1369 Important: sox security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jan 23, 2026
- ALAS2-2026-3129 Important: sox security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jan 21, 2026