914107 – media-libs/audiofile: please last-rite

Bug 914107 - media-libs/audiofile: please last-rite

Summary: media-libs/audiofile: please last-rite

Status:	CONFIRMED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Gentoo Sound Team

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2023-09-13 14:30 UTC by Agostino Sarubbo
Modified:	2023-10-05 07:17 UTC (History)
CC List:	4 users (show)

See Also:	915196
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2023-09-13 14:30:43 UTC

audiofile suffers from a lot of security bugs (few of these reported by me), see https://github.com/mpruett/audiofile/issues

Latest release is 10 years ago
Latest commit is 7 years ago

Comment 1 Ionen Wolkens gentoo-dev

2023-09-13 14:55:24 UTC

Would have to also last-rite xemacs, gnustep, libgig+revdeps, among others as things are right now.

fwiw our in-tree version does have a few security patches, not that I know how extensive it is

Comment 2 Pacho Ramos gentoo-dev

2023-09-17 15:10:41 UTC

It seems there are few more fixes for the overflow issues in Debian and Fedora that maybe we could import