summaryrefslogtreecommitdiff
path: root/libvorbis/Pkgfile
diff options
context:
space:
mode:
authorDanny Rawlins <monster.romster@gmail.com>2018-03-07 01:15:29 +1100
committerDanny Rawlins <monster.romster@gmail.com>2018-03-07 01:16:48 +1100
commitf0344af4ee764125b3c263d74fd866fcc0610dec (patch)
tree2deda27f829d9f87fda6c170ca80148ebb458d3d /libvorbis/Pkgfile
parent27d01bcddbe13fc6004e176b6f69bb40a2288cb5 (diff)
downloadopt-f0344af4ee764125b3c263d74fd866fcc0610dec.tar.gz
opt-f0344af4ee764125b3c263d74fd866fcc0610dec.tar.xz
[notify] libvorbis: security fixes for: CVE-2017-14160, CVE-2017-14632, and CVE-2017-14633 closes FS#1595
Diffstat (limited to 'libvorbis/Pkgfile')
-rw-r--r--libvorbis/Pkgfile27
1 files changed, 17 insertions, 10 deletions
diff --git a/libvorbis/Pkgfile b/libvorbis/Pkgfile
index 6036da968..6461bb154 100644
--- a/libvorbis/Pkgfile
+++ b/libvorbis/Pkgfile
@@ -1,21 +1,28 @@
# Description: Vorbis codec library
-# URL: http://www.xiph.org/ogg/vorbis/
-# Maintainer: Jose V Beneyto, sepen at crux dot nu
-# Packager: Tilman Sauerbeck, tilman at crux dot nu
+# URL: https://www.xiph.org/ogg/vorbis/
+# Maintainer: Danny Rawlins, crux at romster dot me
# Depends on: libogg
name=libvorbis
version=1.3.5
-release=1
-source=(http://downloads.xiph.org/releases/vorbis/$name-$version.tar.xz)
+release=2
+source=(https://downloads.xiph.org/releases/vorbis/$name-$version.tar.xz
+ CVE-2017-14633.patch
+ CVE-2017-14632.patch
+ CVE-2017-14160.patch)
build() {
- cd $name-$version
+ cd $name-$version
- ./configure --prefix=/usr
+ # https://security-tracker.debian.org/tracker/source-package/libvorbis
+ patch -p1 -i $SRC/CVE-2017-14633.patch
+ patch -p1 -i $SRC/CVE-2017-14632.patch
+ patch -p1 -i $SRC/CVE-2017-14160.patch
- make
- make DESTDIR=$PKG install
+ ./configure --prefix=/usr
- rm -rf $PKG/usr/share/doc
+ make
+ make DESTDIR=$PKG install
+
+ rm -rf $PKG/usr/share/doc
}

Generated by cgit