mkvtoolnix: update to 28.2.0. security fix. * mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a case of memory being accessed after it had been freed earlier. This can be triggered by specially crafted Matroska files and lead to arbitrary code execution. The vulnerability was reported as Cisco TALOS 2018-0694 on 2018-10-25.diff -r1.116 -r1.117 pkgsrc/multimedia/mkvtoolnix/Makefile
(maya)
@@ -1,16 +1,16 @@ | @@ -1,16 +1,16 @@ | |||
1 | # $NetBSD: Makefile,v 1.116 2018/10/24 10:55:06 adam Exp $ | 1 | # $NetBSD: Makefile,v 1.117 2018/10/26 18:09:39 maya Exp $ | |
2 | 2 | |||
3 | DISTNAME= mkvtoolnix-28.1.0 | 3 | DISTNAME= mkvtoolnix-28.2.0 | |
4 | CATEGORIES= multimedia | 4 | CATEGORIES= multimedia | |
5 | MASTER_SITES= https://mkvtoolnix.download/sources/ | 5 | MASTER_SITES= https://mkvtoolnix.download/sources/ | |
6 | EXTRACT_SUFX= .tar.xz | 6 | EXTRACT_SUFX= .tar.xz | |
7 | 7 | |||
8 | MAINTAINER= pkgsrc-users@NetBSD.org | 8 | MAINTAINER= pkgsrc-users@NetBSD.org | |
9 | HOMEPAGE= https://mkvtoolnix.download/ | 9 | HOMEPAGE= https://mkvtoolnix.download/ | |
10 | COMMENT= Set of tools to create, alter and inspect Matroska files | 10 | COMMENT= Set of tools to create, alter and inspect Matroska files | |
11 | LICENSE= gnu-gpl-v2 | 11 | LICENSE= gnu-gpl-v2 | |
12 | 12 | |||
13 | BUILD_DEPENDS+= docbook-xsl-[0-9]*:../../textproc/docbook-xsl | 13 | BUILD_DEPENDS+= docbook-xsl-[0-9]*:../../textproc/docbook-xsl | |
14 | BUILD_DEPENDS+= po4a-[0-9]*:../../textproc/po4a | 14 | BUILD_DEPENDS+= po4a-[0-9]*:../../textproc/po4a | |
15 | BUILD_DEPENDS+= ${RUBY_BASE}>=${RUBY_VERSION}:${RUBY_SRCDIR} | 15 | BUILD_DEPENDS+= ${RUBY_BASE}>=${RUBY_VERSION}:${RUBY_SRCDIR} | |
16 | 16 |
@@ -1,7 +1,7 @@ | @@ -1,7 +1,7 @@ | |||
1 | $NetBSD: distinfo,v 1.55 2018/10/24 10:55:06 adam Exp $ | 1 | $NetBSD: distinfo,v 1.56 2018/10/26 18:09:39 maya Exp $ | |
2 | 2 | |||
3 | SHA1 (mkvtoolnix-28.1.0.tar.xz) = ff19f392d89c2cb0fc8a1448c579b2a928f1b8f2 | 3 | SHA1 (mkvtoolnix-28.2.0.tar.xz) = e54ee2ccc241ca3d21d7cc61daa934c51da798f0 | |
4 | RMD160 (mkvtoolnix-28.1.0.tar.xz) = f6535808fdd4412744b61e1d09333e3f80fbd6bd | 4 | RMD160 (mkvtoolnix-28.2.0.tar.xz) = 903e89f5110e9eb472dbe3e16b6b7c369f2026e2 | |
5 | SHA512 (mkvtoolnix-28.1.0.tar.xz) = be081ce454c1940d3be50930072aa0e7fc9de905b06715829dc0d5e52e21727f91eb6beaf68e48296f2830755e613c082b6f14d52f7d7cbbd8d05dbd9ec8c1f0 | 5 | SHA512 (mkvtoolnix-28.2.0.tar.xz) = 89c9890673a1755d203878b7cc656b44a0835bcb71f96f1f5d0f94b9bf651b95efb93c16601480f7c3c8abec16a5d655238705d84b54549ba094445236ab1efd | |
6 | Size (mkvtoolnix-28.1.0.tar.xz) = 6546944 bytes | 6 | Size (mkvtoolnix-28.2.0.tar.xz) = 6546844 bytes | |
7 | SHA1 (patch-build-config.in) = 89c67720f7886741dcabbbed88cfbfd31bf4ccc7 | 7 | SHA1 (patch-build-config.in) = 89c67720f7886741dcabbbed88cfbfd31bf4ccc7 |