You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tree: bdfb854af5

boot-lvm

cross

crossperl

early

karasz/new-early

karasz/qt

linux-2.6.27.6

master

stable/0.1.0

stable/0.2

stable/0.3

stable/0.5

stable/0.6

test/0.2-linux-2.6.38

user/amery/0.1.0/test

user/amery/cross

user/amery/mess

user/amery/next/luajit

user/amery/next/master

user/amery/next/uclibc

user/amery/runit-rework

user/amery/sid

user/amery/wip/aclocal

user/amery/wip/python

user/chris/0.1.0/dovecot-2.0

user/chris/0.1.0/grsecurity

user/chris/0.1.0/linux-2.6.35

user/chris/next/0.4

user/chris/next/aufs

user/chris/next/master

user/chris/next/shadow

user/chris/next/xorg

user/chris/old/linux-pax

user/chris/old/multilib

user/chris/old/ruby

user/chris/test/arm

user/chris/test/early-mdev

user/chris/test/multilib

user/chris/test/perl-cross

user/chris/toolchain/0.3

user/chris/wip/linux37

user/chris/wip/musl

user/karasz/firmware

user/karasz/next/postgresql

user/karasz/next/updates

user/karasz/test/ecn

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'bdfb854af5'

${ noResults }

package-update/audio/alsaplayer

History

Aldas Nabazas 6e9dcbd6a7 Updated alsaplayer (0.99.76 -> 0.99.80) : SECURITY - MEDIUM ... CVE-2006-4089 (Medium) : Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c; (2) a long URL sent by a web server when AlsaPlayer is seeking a media file for the playlist, which triggers overflows in new_list_item and CbUpdated in interface/gtk/PlaylistWindow.cpp; and (3) a long response sent by a CDDB server, which triggers an overflow in cddb_lookup in input/ccda/cdda_engine.c. CVE-2007-5301 (Medium) : Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.		17 years ago
..
alsaplayer.cache	* relocated current package database to the trunk of the package sub-project	18 years ago
alsaplayer.conf	Regenerated copyright notes broadly, without renewing them.	17 years ago
alsaplayer.desc	Updated alsaplayer (0.99.76 -> 0.99.80) : SECURITY - MEDIUM	17 years ago