LogoopenSUSE Build Service > Request 243591
Sign Up | Log In

Request 243591 (superseded)

Add parameters

Submit package home:posophe:br...ultimedia:apps / timidity to package multimedia:apps / timidity

[-] [+] Changed timidity.changes
[-] [+] Changed timidity.spec ^
[-] [+] Deleted README.SUSE ^
[-] [+] Added README.SuSE ^
Renamed TiMidity++-2.14.0.tar.bz2 ^
[-] [+] Changed timidity.service ^
[-] [+] Deleted timidity.sysconf ^

Mentioned Issues (3)

CVE-2006-4335
Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a
CVE-2006-4337
Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.
CVE-2006-4338
unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

There's nothing to be done right now

Request History

Denisart Benjamin posophe created request about 2 years ago
Add parameters
Tomáš Chvátal scarabeus_factory Request got declined about 2 years ago
Also I have to point out that TiMidity is hosted on sourceforge so please use full URL to the Sources path, also preferably use the .xz tarball as it is smallest :)
Also please rename README.SuSE to README.SUSE so we don't use obsolete name :)
If bored also try to run spec-cleaner over it it should change ordering of few variables there :)
Denisart Benjamin posophe Request got superseded by request 244361 about 2 years ago

Comments for request 243591 (2)

Takashi Iwai tiwai wrote about 2 years ago

As mentioned earlier, the option values should be configurable, not hard-coded. The given sample rate isn't always available, and the buffer/period setup might be too small for some systems.

Denisart Benjamin posophe wrote about 2 years ago

Ok. I keep sysconfig support, and do it later