audiofile icon indicating copy to clipboard operation
audiofile copied to clipboard

New Release

Open FuzzyGophers opened this issue 5 years ago • 9 comments

Can you please roll a new release with all these security fixes?

FuzzyGophers avatar Mar 27 '19 00:03 FuzzyGophers

I second this request. I can't build 0.3.6 on my Debian Stretch machine because of " left operand of shift expression '(-1 << 31)' is negative [-fpermissive]" build error. Apparently this is fixed in 0.3.6-2 according to this: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812055

kv9y avatar May 26 '19 12:05 kv9y

Found a solution to my problem: ./configure CXXFLAGS='-fpermissive' This will remove the build error mentioned above.

kv9y avatar May 26 '19 13:05 kv9y

Hi! I'm currently maintaining audiofile for Arch Linux and would also very much see a release of this software, to drop the many many patches ontop of version 0.3.6. Thank you!

dvzrv avatar Sep 01 '19 14:09 dvzrv

@mpruett I've just checked and audiofile has accumulated a whopping 16(!) CVEs and it is completely unclear (judging from git log), whether any of them have actually been fixed.

Please do something about this! This library is used in many pieces of software and distributions. If you feel, you would not like to maintain it anymore, this would be the perfect time to find someone who would be willing to help!

dvzrv avatar Sep 01 '19 14:09 dvzrv

There are pending pull requests like #42 to address lots of issues mentioned in the open issues that are all about those CVEs. While these are not applied, a new release isn't worth much. If @mpruett has no interest in audiofile anymore, maybe the folks at https://github.com/resurrecting-open-source-projects/ can take on the quest

anthraxx avatar Sep 02 '19 12:09 anthraxx

@mpruett ping?

dvzrv avatar Jun 03 '20 13:06 dvzrv

+1

kloczek avatar Feb 09 '22 11:02 kloczek

+1

nbenitez avatar Sep 11 '22 20:09 nbenitez

+1 @mpruett an answer will be appreciated

ciros88 avatar Jul 06 '24 05:07 ciros88