[crux-commits] ports/contrib (3.5): [notify] vlc: 3.0.10 -> 3.0.11; fixes CVE-2020-13428

crux at crux.nu crux at crux.nu
Wed Jun 17 20:52:11 UTC 2020


commit 5cdf28489051f1087a4c755cd3479040f79ded35
Author: Tim Biermann <tbier at posteo.de>
Date:   Wed Jun 17 20:51:59 2020 +0000

    [notify] vlc: 3.0.10 -> 3.0.11; fixes CVE-2020-13428

diff --git a/vlc/.footprint b/vlc/.footprint
index bd0b4eab9..5b6747731 100644
--- a/vlc/.footprint
+++ b/vlc/.footprint
@@ -122,6 +122,10 @@ drwxr-xr-x	root/root	usr/lib/pkgconfig/
 drwxr-xr-x	root/root	usr/lib/vlc/
 -rw-r--r--	root/root	usr/lib/vlc/libcompat.a
 -rwxr-xr-x	root/root	usr/lib/vlc/libcompat.la
+-rwxr-xr-x	root/root	usr/lib/vlc/libvlc_vdpau.la
+lrwxrwxrwx	root/root	usr/lib/vlc/libvlc_vdpau.so -> libvlc_vdpau.so.0.0.0
+lrwxrwxrwx	root/root	usr/lib/vlc/libvlc_vdpau.so.0 -> libvlc_vdpau.so.0.0.0
+-rwxr-xr-x	root/root	usr/lib/vlc/libvlc_vdpau.so.0.0.0
 -rwxr-xr-x	root/root	usr/lib/vlc/libvlc_xcb_events.la
 lrwxrwxrwx	root/root	usr/lib/vlc/libvlc_xcb_events.so -> libvlc_xcb_events.so.0.0.0
 lrwxrwxrwx	root/root	usr/lib/vlc/libvlc_xcb_events.so.0 -> libvlc_xcb_events.so.0.0.0
@@ -609,6 +613,19 @@ drwxr-xr-x	root/root	usr/lib/vlc/plugins/text_renderer/
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/text_renderer/libfreetype_plugin.so
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/text_renderer/libtdummy_plugin.la
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/text_renderer/libtdummy_plugin.so
+drwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_adjust_plugin.la
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_adjust_plugin.so
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_avcodec_plugin.la
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_avcodec_plugin.so
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_chroma_plugin.la
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_chroma_plugin.so
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_deinterlace_plugin.la
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_deinterlace_plugin.so
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_display_plugin.la
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_display_plugin.so
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_sharpen_plugin.la
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/vdpau/libvdpau_sharpen_plugin.so
 drwxr-xr-x	root/root	usr/lib/vlc/plugins/video_chroma/
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_chroma/libchain_plugin.la
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_chroma/libchain_plugin.so
@@ -740,6 +757,8 @@ drwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libflaschen_plugin.so
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libgl_plugin.la
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libgl_plugin.so
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libglconv_vdpau_plugin.la
+-rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libglconv_vdpau_plugin.so
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libglx_plugin.la
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libglx_plugin.so
 -rwxr-xr-x	root/root	usr/lib/vlc/plugins/video_output/libvdummy_plugin.la
@@ -793,14 +812,6 @@ drwxr-xr-x	root/root	usr/share/icons/hicolor/48x48/
 drwxr-xr-x	root/root	usr/share/icons/hicolor/48x48/apps/
 -rw-r--r--	root/root	usr/share/icons/hicolor/48x48/apps/vlc-xmas.png
 -rw-r--r--	root/root	usr/share/icons/hicolor/48x48/apps/vlc.png
-drwxr-xr-x	root/root	usr/share/kde4/
-drwxr-xr-x	root/root	usr/share/kde4/apps/
-drwxr-xr-x	root/root	usr/share/kde4/apps/solid/
-drwxr-xr-x	root/root	usr/share/kde4/apps/solid/actions/
--rw-r--r--	root/root	usr/share/kde4/apps/solid/actions/vlc-openbd.desktop
--rw-r--r--	root/root	usr/share/kde4/apps/solid/actions/vlc-opencda.desktop
--rw-r--r--	root/root	usr/share/kde4/apps/solid/actions/vlc-opendvd.desktop
--rw-r--r--	root/root	usr/share/kde4/apps/solid/actions/vlc-openvcd.desktop
 drwxr-xr-x	root/root	usr/share/man/
 drwxr-xr-x	root/root	usr/share/man/man1/
 -rw-r--r--	root/root	usr/share/man/man1/vlc-wrapper.1.gz
diff --git a/vlc/.signature b/vlc/.signature
index 8cceebd4d..f0869fa1a 100644
--- a/vlc/.signature
+++ b/vlc/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF316f3s+p3WcCmRjCfUirFk9t1b5ZB4rNGUCLXE+jXJar75Ad2NRuobcLEnUVoukUOSpQqcl8JZqaCORqAS9rEQc=
-SHA256 (Pkgfile) = fbb45c7ebffa96ef4afb027722f679f43f8bc668601a561d56dd32330b0d5054
-SHA256 (.footprint) = 77e3bfa88327b3474551d5842f1ab07c2bfe587e04782b219274c86f94e46ea1
-SHA256 (vlc-3.0.10.tar.xz) = a966abfc7f3b2ff3adaa130306ecaf5d6ad3b6dc73385fc9ab0c1204029d4c31
+RWSagIOpLGJF311jtrybjQR7Orp9rTnTD7xIlrZLQMI306+i3Czoi9BK/XQ7XTpjDKjY3Eia9ZVv5WNJbDlD7EkBQW4nBf6o/Q4=
+SHA256 (Pkgfile) = fd919bede90abd4d0ea521127276ec4be9e171c524c995c7851be7c95e726e44
+SHA256 (.footprint) = 83ea36a52e6136c64d7f4ee7109a271067302b5fab5df35ec3fbb2f0c99b5931
+SHA256 (vlc-3.0.11.tar.xz) = 3e94a1acf33445e9da15d528aa48657aa26b912eaa2656b403d43860a8834919
diff --git a/vlc/Pkgfile b/vlc/Pkgfile
index 4b21695cf..6b1afee2f 100644
--- a/vlc/Pkgfile
+++ b/vlc/Pkgfile
@@ -5,31 +5,17 @@
 # Nice to have: opus libvorbis x264 libogg libmtp libtheora flac libvdpau
 
 name=vlc
-version=3.0.10
+version=3.0.11
 release=1
 source=(https://download.videolan.org/pub/videolan/$name/$version/$name-$version.tar.xz)
 
 build() {
   cd $name-$version
 
-  [ -z "$(pkg-config --libs --static libavutil | grep -- '-lvdpau')" ] && PKGMK_VLC=' --disable-vdpau'
+  [ -z "$(pkg-config --libs --static libavutil | grep -- '-lvdpau')" ] && PKGMK_VLC+=' --disable-vdpau'
 
-  # allow building with new avcodec
-  #sed -i 's/ 56/ 57/g' configure.ac
   autoreconf -fi
 
-  # initialize avformat structure
-  #sed -i 's/AVProbeData *pd;/AVProbeData pd={};/g' modules/demux/avformat/demux.c
-
-  #PKG_CONFIG_PATH="/usr/lib/ffmpeg-compat/pkgconfig" \
-
-  ## grabbed from arch
-  ## https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/vlc
-  #export CFLAGS+=" -I/usr/include/samba-4.0"
-  #export CPPFLAGS+=" -I/usr/include/samba-4.0"
-  #export CXXFLAGS+=" -std=c++11"
-  #export LUAC=/usr/bin/luac
-  #export LUA_LIBS="$(pkg-config --libs lua)"
   export RCC=/usr/bin/rcc-qt5
   sed -e 's|-Werror-implicit-function-declaration||g' -i configure
   BUILDCC="gcc -std=gnu11" \
@@ -41,10 +27,9 @@ build() {
     --disable-update-check \
     --enable-alsa
 
-  #make
   V=1 ./compile
   make DESTDIR=$PKG install
-  rm -rf $PKG/usr/share/doc
+  rm -rf $PKG/usr/share/{doc,kde4}
 
   # fix desktop file
   sed -i 's/--started-from-file//g' $PKG/usr/share/applications/vlc.desktop
diff --git a/vlc/post-install b/vlc/post-install
new file mode 100644
index 000000000..a2d63ed70
--- /dev/null
+++ b/vlc/post-install
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+/usr/lib/vlc/vlc-cache-gen /usr/lib/vlc/plugins


More information about the crux-commits mailing list