CVS commit: [pkgsrc-2017Q4] pkgsrc/audio/libvorbis

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Fri Mar 16 21:37:30 UTC 2018

Modified Files:
        pkgsrc/audio/libvorbis [pkgsrc-2017Q4]: Makefile distinfo

Log Message:
Pullup ticket #5722 - requested by maya
audio/libvorbis: security update

Revisions pulled up:
- audio/libvorbis/Makefile                                      1.60
- audio/libvorbis/distinfo                                      1.26

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        maya
   Date:                Fri Mar 16 20:23:53 UTC 2018

   Modified Files:
        pkgsrc/audio/libvorbis: Makefile distinfo

   Log Message:
   libvorbis: update to 1.3.6. security fix.

   libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)"

   * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
   * Fix CVE-2017-14632 - free() on unitialized data
   * Fix CVE-2017-14633 - out-of-bounds read
   * Fix bitrate metadata parsing.
   * Fix out-of-bounds read in codebook parsing.
   * Fix residue vector size in Vorbis I spec.
   * Appveyor support
   * Travis CI support
   * Add secondary CMake build system.
   * Build system fixes

   To generate a diff of this commit:
   cvs rdiff -u -r1.59 -r1.60 pkgsrc/audio/libvorbis/Makefile
   cvs rdiff -u -r1.25 -r1.26 pkgsrc/audio/libvorbis/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.59 -r1.59.6.1 pkgsrc/audio/libvorbis/Makefile
cvs rdiff -u -r1.25 -r1.25.20.1 pkgsrc/audio/libvorbis/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/audio/libvorbis/Makefile
diff -u pkgsrc/audio/libvorbis/Makefile:1.59 pkgsrc/audio/libvorbis/Makefile:1.59.6.1
--- pkgsrc/audio/libvorbis/Makefile:1.59        Wed Aug 16 20:21:03 2017
+++ pkgsrc/audio/libvorbis/Makefile     Fri Mar 16 21:37:30 2018
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.59 2017/08/16 20:21:03 wiz Exp $
+# $NetBSD: Makefile,v 1.59.6.1 2018/03/16 21:37:30 spz Exp $
 
-DISTNAME=      libvorbis-1.3.5
+DISTNAME=      libvorbis-1.3.6
 CATEGORIES=    devel audio
 MASTER_SITES=  http://downloads.xiph.org/releases/vorbis/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/audio/libvorbis/distinfo
diff -u pkgsrc/audio/libvorbis/distinfo:1.25 pkgsrc/audio/libvorbis/distinfo:1.25.20.1
--- pkgsrc/audio/libvorbis/distinfo:1.25        Tue Nov  3 01:12:39 2015
+++ pkgsrc/audio/libvorbis/distinfo     Fri Mar 16 21:37:30 2018
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.25 2015/11/03 01:12:39 agc Exp $
+$NetBSD: distinfo,v 1.25.20.1 2018/03/16 21:37:30 spz Exp $
 
-SHA1 (libvorbis-1.3.5.tar.xz) = 7b4cdd4a73fadfed457ae40984cb0cc91146b300
-RMD160 (libvorbis-1.3.5.tar.xz) = 9d63b156e222fe865a6a4869bdf237d9523ce623
-SHA512 (libvorbis-1.3.5.tar.xz) = f18f32edc43f65fea2dd4133e2828a0ced9e5b0797c4569bd26989fc1409ad599359e7c796bffc082ad36189f9722c7b38837384cea66d217beac8b425299ef8
-Size (libvorbis-1.3.5.tar.xz) = 1193144 bytes
+SHA1 (libvorbis-1.3.6.tar.xz) = 237e3d1c66452734fd9b32f494f44238b4f0185e
+RMD160 (libvorbis-1.3.6.tar.xz) = 80213c5a1506438a342588ae58097a1590b6657c
+SHA512 (libvorbis-1.3.6.tar.xz) = a5d990bb88db2501b16f8eaee9f2ecb599cefd7dab2134d16538d8905263a972157c7671867848c2a8a358bf5e5dbc7721205ece001032482f168be7bda4f132
+Size (libvorbis-1.3.6.tar.xz) = 1195388 bytes