summaryrefslogtreecommitdiff
path: root/audio/libtunepimp0.4
AgeCommit message (Collapse)AuthorFilesLines
2006-08-23Do not accept libtunepimp>=0.5. Noted by joerg@wiz1-1/+2
2006-08-21Security fix for CVE-2006-3600:salo3-3/+28
"A vulnerability in libtunepimp can be potentially exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the "LookupTRM::lookup()" function when retrieving album release dates. This can be exploited to cause a buffer overflow by returning an overly long release date string (more than 100 bytes). Successful exploitation may allow execution of arbitrary code in context of an application using the vulnerable library." http://secunia.com/advisories/21026/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3600 Patch from MusicBrainz SVN. Bump PKGREVISION.
2006-07-12Mention that this is an older release.wiz2-2/+5
2006-07-12Reimport libtunepimp as libtunepimp0.4, in preparation for the libtunepimpwiz9-0/+191
update, for packages which still need the 0.4 API.