CVS commit: [pkgsrc-2015Q4] pkgsrc/audio/vorbis-tools

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Mon Jan 18 05:47:06 UTC 2016

Modified Files:
        pkgsrc/audio/vorbis-tools [pkgsrc-2015Q4]: Makefile distinfo
Added Files:
        pkgsrc/audio/vorbis-tools/patches [pkgsrc-2015Q4]: patch-oggenc_audio.c

Log Message:
Pullup ticket #4879 - requested by bsiegert
audio/vorbis-tools: security fix

Revisions pulled up:
- audio/vorbis-tools/Makefile                                   1.62
- audio/vorbis-tools/distinfo                                   1.26
- audio/vorbis-tools/patches/patch-oggenc_audio.c               1.1

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   bsiegert
   Date:           Tue Dec 29 15:12:20 UTC 2015

   Modified Files:
           pkgsrc/audio/vorbis-tools: Makefile distinfo
   Added Files:
           pkgsrc/audio/vorbis-tools/patches: patch-oggenc_audio.c

   Log Message:
   Fix CVE-2015-6749 in vorbis-tools: Buffer overflow in the aiff_open function in
   oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to
   cause a denial of service (crash) via a crafted AIFF file.

   Bump pkgrevision.

   To generate a diff of this commit:
   cvs rdiff -u -r1.61 -r1.62 pkgsrc/audio/vorbis-tools/Makefile
   cvs rdiff -u -r1.25 -r1.26 pkgsrc/audio/vorbis-tools/distinfo
   cvs rdiff -u -r0 -r1.1 pkgsrc/audio/vorbis-tools/patches/patch-oggenc_audio.c


To generate a diff of this commit:
cvs rdiff -u -r1.61 -r1.61.8.1 pkgsrc/audio/vorbis-tools/Makefile
cvs rdiff -u -r1.25 -r1.25.2.1 pkgsrc/audio/vorbis-tools/distinfo
cvs rdiff -u -r0 -r1.1.2.2 \
    pkgsrc/audio/vorbis-tools/patches/patch-oggenc_audio.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.