{"bugs":[{"bugid":942561,"firstseen":"2024-10-30T19:04:22.786342","severity":"normal","status":"IN_PROGRESS","summary":"<media-sound\/mpg123-base-1.32.9: heap overflow when seeking on a malicious stream"},{"bugid":945128,"firstseen":"2024-11-27T16:57:48.503939","severity":"normal","status":"CONFIRMED","summary":"media-sound\/mpg123-base-1.32.9: security stabilization"}],"categories":[{"categoryid":393,"name":"dev-libs","summary":"The dev-libs category contains various miscellaneous programming libraries."},{"categoryid":438,"name":"media-libs","summary":"The media-libs category contains media-related libraries."},{"categoryid":445,"name":"media-plugins","summary":"The media-plugins category contains plugin packages for various media applications."},{"categoryid":373,"name":"media-sound","summary":"The media-sound category contains sound, music and audio applications."},{"categoryid":342,"name":"media-video","summary":"The media-video category contains video-related applications."}],"changelog":[{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"413624eca51c5b9088d05931982ef8876f9419bf","committime":"2024-11-26T06:20:41","packageid":76876,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"There's a bunch of configure option changes upstream which I want to double\ncheck with Igor, but I'm pretty sure that we discussed them all before\nand it doesn't change the approach we took wrt the mpg123-base and\nmpg123-output-plugins split for bug #915858 -- so I've not changed\nany of that in the ebuild.\n\nBug: https:\/\/bugs.gentoo.org\/915858\nBug: https:\/\/bugs.gentoo.org\/942561\nCloses: https:\/\/bugs.gentoo.org\/943699\nSigned-off-by: Sam James <sam@gentoo.org>","commitid":"6903d98e459c3089700ad60a89b10671802679e8","committime":"2024-11-26T05:48:00","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: add 1.32.9"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"562fad09561684954963d0a91b23e0a61f2c7932","committime":"2024-09-12T18:49:01","packageid":76876,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"arthurzam@gentoo.org","authorname":"Arthur Zamarin","body":"Change was created by running the following command::\n\n    ekeyword ^ia64 *\/*\/*.ebuild\n\nSigned-off-by: Arthur Zamarin <arthurzam@gentoo.org>","commitid":"0e727a3a16bc2abfd39386f10821d3e5ce89c45a","committime":"2024-09-07T15:44:22","packageid":76876,"repoid":1,"summary":"*\/*: unkeyword ~ia64"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"e817756739654c06c8a96e8fb68a3da1ba3af055","committime":"2024-04-30T18:48:55","packageid":76876,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"watermanpaint@posteo.net","authorname":"Lucio Sauer","body":"bump copyright of touched ebuilds to 2024\n\nSigned-off-by: Lucio Sauer <watermanpaint@posteo.net>\nSigned-off-by: Michał Górny <mgorny@gentoo.org>","commitid":"794061a3298b5716db015defa7b3e2c583b73980","committime":"2024-04-12T10:47:52","packageid":76876,"repoid":1,"summary":"*\/*: inline mirror:\/\/sourceforge"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"d385f1a98c096585ae569e73f1e1240162cc0791","committime":"2024-01-15T16:18:21","packageid":76876,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"mgorny@gentoo.org","authorname":"Michał Górny","body":"Signed-off-by: Michał Górny <mgorny@gentoo.org>\nCloses: https:\/\/github.com\/gentoo\/gentoo\/pull\/34807\nSigned-off-by: Michał Górny <mgorny@gentoo.org>","commitid":"221159b1ca716e208abcd9fc2e3d7efad0db9446","committime":"2024-01-14T20:23:57","packageid":76876,"repoid":1,"summary":"Move {sys-devel → dev-build}\/libtool"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"ec46f6e11df339d49b6da417abf09b9af2eab6c7","committime":"2024-01-06T09:17:51","packageid":76876,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"efbfd3b7c14929a94fc0eaf226b3849d7423ab12","committime":"2024-01-06T09:06:02","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: Stabilize 1.32.3 x86, #921387"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"171eb26bca4f40fc50119d1c7917ccf0f0d10990","committime":"2024-01-06T09:05:57","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: Stabilize 1.32.3 sparc, #921387"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"6aaef824a74c10425d6b7bf1cf937f5de183acdc","committime":"2024-01-06T09:05:51","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: Stabilize 1.32.3 ppc64, #921387"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"2d4d80e71f5e449bb43f4a09998f807c61e7944a","committime":"2024-01-06T09:05:44","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: Stabilize 1.32.3 ppc, #921387"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"21fb0ae2387e7445816dab41819232e80a01f276","committime":"2024-01-06T09:05:39","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: Stabilize 1.32.3 arm, #921387"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"adf2fbb3d6bccf774e3546219c006accec65fa69","committime":"2024-01-06T09:05:33","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: Stabilize 1.32.3 arm64, #921387"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"030583b050e78d166657bb21b70f014e492d8f0a","committime":"2024-01-06T09:05:26","packageid":76876,"repoid":1,"summary":"media-sound\/mpg123-base: Stabilize 1.32.3 amd64, #921387"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"11c025895f8d148577a016c65d06d32ddb54f8e4","committime":"2024-01-05T10:04:37","packageid":76876,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"igor.v.kovalenko@gmail.com","authorname":"Igor V. Kovalenko","body":"Bug: https:\/\/bugs.gentoo.org\/915858\nSigned-off-by: Igor V. Kovalenko <igor.v.kovalenko@gmail.com>\nSigned-off-by: Sam James <sam@gentoo.org>","commitid":"678ac3aa7124df6309e213caa7b5efa189939a35","committime":"2023-12-09T10:58:14","packageid":76876,"repoid":1,"summary":"media-libs\/mpg123: Convert into metapackage and drop libmpg123, 1.32.3-r100"}],"dependencies":[{"block":false,"categoryid":393,"description":"A shared library tool for developers","ebuildids":[810877,845815],"firstseen":"2014-11-03T14:39:06.100855","maintainer":"base-system@gentoo.org","maintainername":"Gentoo Base System","name":"libltdl","packageid":62765}],"depending":[{"block":false,"categoryid":342,"description":"Media player and framework with support for most multimedia files and streaming","ebuildids":[40102,40102,78066,78066,831731,831731,845659,845659],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"sdnick484@gmail.com","maintainername":"Nick Andrade","name":"vlc","packageid":42652},{"block":false,"categoryid":438,"description":"C library for reading and writing files containing sampled sound","ebuildids":[35329,35329,810873,810873],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"sound@gentoo.org","maintainername":"Gentoo Sound project","name":"libsndfile","packageid":43587},{"block":false,"categoryid":373,"description":"A meta package for realtime MPEG 1.0\/2.0\/2.5 audio player for layers 1, 2 and 3","ebuildids":[810876,810876],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"sound@gentoo.org","maintainername":"Gentoo Sound project","name":"mpg123","packageid":45249},{"block":false,"categoryid":373,"description":"Free crossplatform audio editor","ebuildids":[800774,800774,823472,823472,842831,842831,847843,847843],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"proaudio@gentoo.org","maintainername":"Gentoo ProAudio Project","name":"audacity","packageid":51678},{"block":false,"categoryid":445,"description":"Lightweight and versatile audio player","ebuildids":[843123,843123],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"chainsaw@gentoo.org","maintainername":"Tony Vroon","name":"audacious-plugins","packageid":53088},{"block":false,"categoryid":373,"description":"X(cross)platform Music Multiplexing System, next generation of the XMMS player","ebuildids":[845709,845709],"firstseen":"2010-06-30T14:36:03.531468","maintainer":"slyfox@gentoo.org","maintainername":"Sergei Trofimovich","name":"xmms2","packageid":55965},{"block":false,"categoryid":445,"description":"MP3 decoder plugin for GStreamer","ebuildids":[821238,821238],"firstseen":"2016-09-19T13:36:56.704131","name":"gst-plugins-mpg123","packageid":65895},{"block":false,"categoryid":373,"description":"DeaDBeeF is a modular audio player similar to foobar2000","ebuildids":[839512,839512],"firstseen":"2020-09-29T22:40:59.162866","name":"deadbeef","packageid":72049}],"ebuilds":[{"archs":["~alpha","~amd64","~amd64-linux","~arm","~arm64","~hppa","~loong","~m68k","~mips","~ppc","~ppc-macos","~ppc64","~riscv","~sparc","~x64-macos","~x86","~x86-linux"],"ebuildid":845815,"firstseen":"2024-11-26T06:30:57.261849","license":"GPL-2 LGPL-2.1","moddate":"2024-12-17T22:35:47","packageid":76876,"repoid":1,"slot":"0","uses":["abi_mips_n32","abi_mips_n64","abi_mips_o32","abi_s390_32","abi_s390_64","abi_x86_32","abi_x86_64","abi_x86_x32","alsa","coreaudio","cpu_flags_ppc_altivec","cpu_flags_x86_3dnow","cpu_flags_x86_3dnowext","cpu_flags_x86_mmx","cpu_flags_x86_sse","int-quality","ipv6","jack","nas","oss","portaudio","pulseaudio","sdl"],"version":"1.32.9"},{"archs":["amd64","arm","arm64","ppc","ppc64","sparc","x86","~alpha","~amd64-linux","~hppa","~loong","~m68k","~mips","~ppc-macos","~riscv","~x64-macos","~x86-linux"],"ebuildid":810877,"firstseen":"2024-01-05T10:12:12.047249","license":"GPL-2 LGPL-2.1","moddate":"2024-12-17T22:35:47","packageid":76876,"repoid":1,"slot":"0","uses":["abi_mips_n32","abi_mips_n64","abi_mips_o32","abi_s390_32","abi_s390_64","abi_x86_32","abi_x86_64","abi_x86_x32","alsa","coreaudio","cpu_flags_ppc_altivec","cpu_flags_x86_3dnow","cpu_flags_x86_3dnowext","cpu_flags_x86_mmx","cpu_flags_x86_sse","int-quality","ipv6","jack","nas","oss","portaudio","pulseaudio","sdl"],"version":"1.32.3"}],"masks":[],"package":{"categoryid":373,"description":"a realtime MPEG 1.0\/2.0\/2.5 audio player for layers 1, 2 and 3","firstseen":"2024-01-05T10:12:12.047249","name":"mpg123-base","packageid":76876},"rdependencies":[{"block":false,"categoryid":393,"description":"A shared library tool for developers","ebuildids":[810877,845815],"firstseen":"2014-11-03T14:39:06.100855","maintainer":"base-system@gentoo.org","maintainername":"Gentoo Base System","name":"libltdl","packageid":62765}],"repos":[{"branch":"master","lastcommit":"febc5d20d79c49489824fd1e12e140cd694e8279","name":"gentoo","path":"\/usr\/portage","repoid":1,"upstream":"origin"}],"tracked":false,"urls":["https:\/\/www.mpg123.org\/"],"uses":[{"description":"Add support for media-libs\/alsa-lib (Advanced Linux Sound Architecture)","isdefault":false,"use":"alsa"},{"description":"Build the CoreAudio driver on Mac OS X systems","isdefault":false,"use":"coreaudio"},{"description":"Use rounding instead of fast truncation for integer output, where possible","isdefault":false,"packageid":76876,"use":"int-quality"},{"description":"Add support for IP version 6","isdefault":false,"use":"ipv6"},{"description":"Add support for the JACK Audio Connection Kit","isdefault":false,"use":"jack"},{"description":"Add support for network audio sound","isdefault":false,"use":"nas"},{"description":"Add support for OSS (Open Sound System)","isdefault":false,"use":"oss"},{"description":"Add support for the crossplatform portaudio audio API","isdefault":false,"use":"portaudio"},{"description":"Add sound server support via media-libs\/libpulse (may be PulseAudio or PipeWire)","isdefault":false,"use":"pulseaudio"},{"description":"Add support for Simple Direct Layer (media library)","isdefault":false,"use":"sdl"},{"description":"64-bit (32-bit pointer) libraries","group":"abi_mips","isdefault":false,"use":"n32"},{"description":"64-bit libraries","group":"abi_mips","isdefault":false,"use":"n64"},{"description":"32-bit libraries","group":"abi_mips","isdefault":false,"use":"o32"},{"description":"32-bit (s390) libraries","group":"abi_s390","isdefault":false,"use":"32"},{"description":"64-bit (s390x) libraries","group":"abi_s390","isdefault":false,"use":"64"},{"description":"32-bit (x86) libraries","group":"abi_x86","isdefault":false,"use":"32"},{"description":"64-bit (amd64) libraries","group":"abi_x86","isdefault":false,"use":"64"},{"description":"x32 ABI libraries","group":"abi_x86","isdefault":false,"use":"x32"},{"description":"Use the AltiVec\/VMX instruction set","group":"cpu_flags_ppc","isdefault":false,"use":"altivec"},{"description":"Use the 3DNow! instruction set","group":"cpu_flags_x86","isdefault":false,"use":"3dnow"},{"description":"Use the Enhanced 3DNow! instruction set","group":"cpu_flags_x86","isdefault":false,"use":"3dnowext"},{"description":"Use the MMX instruction set","group":"cpu_flags_x86","isdefault":false,"use":"mmx"},{"description":"Use the SSE instruction set","group":"cpu_flags_x86","isdefault":false,"use":"sse"}]}