Arch Linux User Repository

Search Criteria

Enter search criteria

Search by

Keywords

Out of Date

Sort by

Sort order

Per page

Package Details: slopsmith-desktop-bin 0.2.8-2

Package Actions

Git Clone URL:	https://aur.archlinux.org/slopsmith-desktop-bin.git (read-only, click to copy)
Package Base:	slopsmith-desktop-bin
Description:	Slopsmith desktop app with integrated audio engine, VST hosting, and amp modeling
Upstream URL:	https://github.com/byrongamatos/slopsmith-desktop
Licenses:	AGPL-3.0-only
Conflicts:	slopsmith-desktop
Provides:	slopsmith-desktop
Submitter:	ariejan
Maintainer:	ariejan
Last Packager:	ariejan
Votes:	2
Popularity:	1.31
First Submitted:	2026-05-15 08:22 (UTC)
Last Updated:	2026-05-30 05:47 (UTC)

Dependencies (12)

alsa-lib
at-spi2-core (at-spi2-core-git^AUR)
gtk3 (gtk3-no_deadkeys_underline^AUR, gtk3-classic^AUR, gtk3-patched-filechooser-icon-view^AUR, gtk3-classic-xfce^AUR)
libnotify (libnotify-git^AUR)
libsecret
libxss
libxtst
nss (nss-hg^AUR)
util-linux-libs (util-linux-libs-aes^AUR, util-linux-libs-selinux^AUR)
xdg-utils (busking-git^AUR, xdg-utils-slock^AUR, mimi^AUR, mimi-git^AUR, opener^AUR, mimejs-git^AUR, xdg-utils-mimeo^AUR)
jack2 (jack2-git^AUR, jack2-git^AUR, pipewire-jack-git^AUR) (optional) – low-latency audio I/O
libappindicator-gtk3 (libappindicator) (optional) – tray icon support

Required by (0)

Sources (1)

slopsmith-desktop-0.2.8.deb

Latest Comments

AlfElFriki commented on 2026-05-28 19:36 (UTC)

A path-traversal vulnerability in Slopsmith's archive extractors allows arbitrary file write — and, with the default Docker configuration running as root, escalation to remote code execution via plugin drop. Every prior 0.2.x release is affected, including v0.2.8 stable and all 0.2.9 alphas (.1 through .4). Their release assets have been removed from GitHub. v0.2.9-alpha.5 is the only safe build.