---
- branch: MAIN
  date: Fri Oct 26 18:09:40 UTC 2018
  files:
  - new: '1.117'
    old: '1.116'
    path: pkgsrc/multimedia/mkvtoolnix/Makefile
    pathrev: pkgsrc/multimedia/mkvtoolnix/Makefile@1.117
    type: modified
  - new: '1.56'
    old: '1.55'
    path: pkgsrc/multimedia/mkvtoolnix/distinfo
    pathrev: pkgsrc/multimedia/mkvtoolnix/distinfo@1.56
    type: modified
  id: 20181026T180940Z.2db43ffb95d1a6fdfe5ca807ae4e96c37dcf3d0e
  log: |
    mkvtoolnix: update to 28.2.0. security fix.

    * mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool &
      chapter editor: fixed a case of memory being accessed after it had been
      freed earlier. This can be triggered by specially crafted Matroska files and
      lead to arbitrary code execution. The vulnerability was reported as Cisco
      TALOS 2018-0694 on 2018-10-25.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/multimedia/mkvtoolnix'
  unixtime: '1540577380'
  user: maya