diff options
author | Danny Rawlins <monster.romster@gmail.com> | 2018-03-07 01:15:29 +1100 |
---|---|---|
committer | Danny Rawlins <monster.romster@gmail.com> | 2018-03-07 01:16:48 +1100 |
commit | f0344af4ee764125b3c263d74fd866fcc0610dec (patch) | |
tree | 2deda27f829d9f87fda6c170ca80148ebb458d3d /libvorbis/Pkgfile | |
parent | 27d01bcddbe13fc6004e176b6f69bb40a2288cb5 (diff) | |
download | opt-f0344af4ee764125b3c263d74fd866fcc0610dec.tar.gz opt-f0344af4ee764125b3c263d74fd866fcc0610dec.tar.xz |
[notify] libvorbis: security fixes for: CVE-2017-14160, CVE-2017-14632, and CVE-2017-14633 closes FS#1595
Diffstat (limited to 'libvorbis/Pkgfile')
-rw-r--r-- | libvorbis/Pkgfile | 27 |
1 files changed, 17 insertions, 10 deletions
diff --git a/libvorbis/Pkgfile b/libvorbis/Pkgfile index 6036da968..6461bb154 100644 --- a/libvorbis/Pkgfile +++ b/libvorbis/Pkgfile @@ -1,21 +1,28 @@ # Description: Vorbis codec library -# URL: http://www.xiph.org/ogg/vorbis/ -# Maintainer: Jose V Beneyto, sepen at crux dot nu -# Packager: Tilman Sauerbeck, tilman at crux dot nu +# URL: https://www.xiph.org/ogg/vorbis/ +# Maintainer: Danny Rawlins, crux at romster dot me # Depends on: libogg name=libvorbis version=1.3.5 -release=1 -source=(http://downloads.xiph.org/releases/vorbis/$name-$version.tar.xz) +release=2 +source=(https://downloads.xiph.org/releases/vorbis/$name-$version.tar.xz + CVE-2017-14633.patch + CVE-2017-14632.patch + CVE-2017-14160.patch) build() { - cd $name-$version + cd $name-$version - ./configure --prefix=/usr + # https://security-tracker.debian.org/tracker/source-package/libvorbis + patch -p1 -i $SRC/CVE-2017-14633.patch + patch -p1 -i $SRC/CVE-2017-14632.patch + patch -p1 -i $SRC/CVE-2017-14160.patch - make - make DESTDIR=$PKG install + ./configure --prefix=/usr - rm -rf $PKG/usr/share/doc + make + make DESTDIR=$PKG install + + rm -rf $PKG/usr/share/doc } |