Mon Jul 6 15:32:47 2020 UTC ()
libvorbis: updated to 1.3.7

libvorbis 1.3.7
* Fix CVE-2018-10393 - out-of-bounds read encoding very low sample rates.
* Fix CVE-2017-14160 - out-of-bounds read encoding very low sample rates.
* Fix handling invalid bytes per sample arguments.
* Fix handling invalid channel count arguments.
* Fix invalid free on seek failure.
* Fix negative shift reading blocksize.
* Fix accepting unreasonable float32 values.
* Fix tag comparison depending on locale.
* Fix unnecessarily linking libm.
* Fix memory leak in test_sharedbook.
* Update Visual Studio projects for ogg library filename change.
* Distribute CMake build files with the source package.
* Remove unnecessary configure --target switch.
* Add gitlab CI support.
* Add OSS-Fuzz support.
* Build system and integration updates.


(adam)
diff -r1.62 -r1.63 pkgsrc/audio/libvorbis/Makefile
diff -r1.27 -r1.28 pkgsrc/audio/libvorbis/distinfo
diff -r1.1 -r0 pkgsrc/audio/libvorbis/patches/patch-lib_psy.c
diff -r1.1 -r0 pkgsrc/audio/libvorbis/patches/patch-lib_vorbisenc.c
cvs diff -r1.62 -r1.63 pkgsrc/audio/libvorbis/Makefile (expand / switch to unified diff)

--- pkgsrc/audio/libvorbis/Makefile 2018/08/06 13:25:38 1.62
+++ pkgsrc/audio/libvorbis/Makefile 2020/07/06 15:32:47 1.63
@@ -1,17 +1,16 @@ @@ -1,17 +1,16 @@
1# $NetBSD: Makefile,v 1.62 2018/08/06 13:25:38 snj Exp $ 1# $NetBSD: Makefile,v 1.63 2020/07/06 15:32:47 adam Exp $
2 2
3DISTNAME= libvorbis-1.3.6 3DISTNAME= libvorbis-1.3.7
4PKGREVISION= 1 
5CATEGORIES= devel audio 4CATEGORIES= devel audio
6MASTER_SITES= http://downloads.xiph.org/releases/vorbis/ 5MASTER_SITES= http://downloads.xiph.org/releases/vorbis/
7EXTRACT_SUFX= .tar.xz 6EXTRACT_SUFX= .tar.xz
8 7
9MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= https://www.xiph.org/vorbis/ 9HOMEPAGE= https://www.xiph.org/vorbis/
11COMMENT= Library for the Ogg Vorbis audio encoding format 10COMMENT= Library for the Ogg Vorbis audio encoding format
12LICENSE= modified-bsd 11LICENSE= modified-bsd
13 12
14USE_LIBTOOL= yes 13USE_LIBTOOL= yes
15GNU_CONFIGURE= yes 14GNU_CONFIGURE= yes
16TEST_TARGET= check 15TEST_TARGET= check
17 16
cvs diff -r1.27 -r1.28 pkgsrc/audio/libvorbis/distinfo (expand / switch to unified diff)

--- pkgsrc/audio/libvorbis/distinfo 2018/08/06 13:25:38 1.27
+++ pkgsrc/audio/libvorbis/distinfo 2020/07/06 15:32:47 1.28
@@ -1,8 +1,6 @@ @@ -1,8 +1,6 @@
1$NetBSD: distinfo,v 1.27 2018/08/06 13:25:38 snj Exp $ 1$NetBSD: distinfo,v 1.28 2020/07/06 15:32:47 adam Exp $
2 2
3SHA1 (libvorbis-1.3.6.tar.xz) = 237e3d1c66452734fd9b32f494f44238b4f0185e 3SHA1 (libvorbis-1.3.7.tar.xz) = 0a2dd71a999656b8091506839e8007a61a8fda1f
4RMD160 (libvorbis-1.3.6.tar.xz) = 80213c5a1506438a342588ae58097a1590b6657c 4RMD160 (libvorbis-1.3.7.tar.xz) = d2740a2d0fb626685eaae47370e42f0b85db81b3
5SHA512 (libvorbis-1.3.6.tar.xz) = a5d990bb88db2501b16f8eaee9f2ecb599cefd7dab2134d16538d8905263a972157c7671867848c2a8a358bf5e5dbc7721205ece001032482f168be7bda4f132 5SHA512 (libvorbis-1.3.7.tar.xz) = bbf5f11f623d959b3ba98d6b52806521b0b918b59b867f0658c153ea1013293364eead4987e9e71f8798021379310860a2e548fcf89d10caf23d45e41aba45cd
6Size (libvorbis-1.3.6.tar.xz) = 1195388 bytes 6Size (libvorbis-1.3.7.tar.xz) = 1203792 bytes
7SHA1 (patch-lib_psy.c) = acbc6fd4e4e7710a05b6342c10270f085214a84f 
8SHA1 (patch-lib_vorbisenc.c) = e65377b441c71e75e86064292dccfb86acf298b2 
File Deleted: pkgsrc/audio/libvorbis/patches/Attic/patch-lib_psy.c
File Deleted: pkgsrc/audio/libvorbis/patches/Attic/patch-lib_vorbisenc.c