ports/opt (3.4): [notify] libvpx: 1.6.1 -> 1.7.0 fixes CVE-2017-13194 closes FS#1607

crux at crux.nu crux at crux.nu
Thu Mar 15 20:57:38 UTC 2018


commit 5284280a7f40fe233fe882ea6b3afb65451bd99d
Author: Danny Rawlins <monster.romster at gmail.com>
Date:   Thu Mar 15 01:07:34 2018 +1100

    [notify] libvpx: 1.6.1 -> 1.7.0 fixes CVE-2017-13194 closes FS#1607

diff --git a/libvpx/.footprint b/libvpx/.footprint
index 779d8ba1f..519702653 100644
--- a/libvpx/.footprint
+++ b/libvpx/.footprint
@@ -16,9 +16,9 @@ drwxr-xr-x	root/root	usr/include/vpx/
 -rw-rw-r--	root/root	usr/include/vpx/vpx_integer.h
 drwxr-xr-x	root/root	usr/lib/
 -rw-r--r--	root/root	usr/lib/libvpx.a
-lrwxrwxrwx	root/root	usr/lib/libvpx.so -> libvpx.so.4.1.0
-lrwxrwxrwx	root/root	usr/lib/libvpx.so.4 -> libvpx.so.4.1.0
-lrwxrwxrwx	root/root	usr/lib/libvpx.so.4.1 -> libvpx.so.4.1.0
--rwxr-xr-x	root/root	usr/lib/libvpx.so.4.1.0
+lrwxrwxrwx	root/root	usr/lib/libvpx.so -> libvpx.so.5.0.0
+lrwxrwxrwx	root/root	usr/lib/libvpx.so.5 -> libvpx.so.5.0.0
+lrwxrwxrwx	root/root	usr/lib/libvpx.so.5.0 -> libvpx.so.5.0.0
+-rwxr-xr-x	root/root	usr/lib/libvpx.so.5.0.0
 drwxr-xr-x	root/root	usr/lib/pkgconfig/
 -rw-r--r--	root/root	usr/lib/pkgconfig/vpx.pc
diff --git a/libvpx/.md5sum b/libvpx/.md5sum
index c8029a352..2ec730688 100644
--- a/libvpx/.md5sum
+++ b/libvpx/.md5sum
@@ -1 +1 @@
-b0925c8266e2859311860db5d76d1671  libvpx-v1.6.1.tar.gz
+193346f9aec0726145e51db732417cd2  libvpx-v1.7.0.tar.gz
diff --git a/libvpx/.signature b/libvpx/.signature
index 4991b716f..03aaf5909 100644
--- a/libvpx/.signature
+++ b/libvpx/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/Wa1zwkBsQ4esbkNQx6H4omaFavJCFkIeD+Yw0jQnze+2HK2GTFJkz5Rxi53R3D6kLWBUQ5YJRAdiAIQzn9APgs=
-SHA256 (Pkgfile) = 04f761e420174bb6d4531ce1b614e08d3cfca364c927d95df5025a9e49260625
-SHA256 (.footprint) = 3f1a780721f0b1dc9abf0b8bc7f4bf68833faa5a6c58cc06935d0d9e5b4c7874
-SHA256 (libvpx-v1.6.1.tar.gz) = cda8bb6f0e4848c018177d3a576fa83ed96d762554d7010fe4cfb9d70c22e588
+RWSE3ohX2g5d/WtAORPt41Xkk3wVL6AxYNjqjGGONMxKeMbTdfYo3PhWfif9FCKjl/LX5kkBhOd2LGMuZcJYyU0CUbVVV64HrgQ=
+SHA256 (Pkgfile) = 7bb605941700ec294e275f7726c8e13b4bf4bb1fda3e277d6613ca7b314e6029
+SHA256 (.footprint) = f8c24dbceb6d447d1199cd4bd299dff48094272e861966abad59860af48af729
+SHA256 (libvpx-v1.7.0.tar.gz) = 1fec931eb5c94279ad219a5b6e0202358e94a93a90cfb1603578c326abfc1238
diff --git a/libvpx/Pkgfile b/libvpx/Pkgfile
index 5ffd97d35..22b9f0ac6 100644
--- a/libvpx/Pkgfile
+++ b/libvpx/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on: yasm
 
 name=libvpx
-version=1.6.1
+version=1.7.0
 release=1
 source=(https://github.com/webmproject/$name/archive/v$version/$name-v$version.tar.gz)
 


More information about the CRUX mailing list