diff options
| author | Natanael Copa <ncopa@alpinelinux.org> | 2019-01-23 19:10:03 +0000 |
|---|---|---|
| committer | Natanael Copa <ncopa@alpinelinux.org> | 2019-01-23 19:12:36 +0000 |
| commit | edfe8b82ee16fb40b8381d3f262ad53b8d72aaff (patch) | |
| tree | f935696caa3c818edbec0f5310dae2c03f63138e /community/soundtouch | |
| parent | 8b809c16866f5bb6d9311592183287272d380d83 (diff) | |
| download | aports-edfe8b82ee16fb40b8381d3f262ad53b8d72aaff.tar.bz2 aports-edfe8b82ee16fb40b8381d3f262ad53b8d72aaff.tar.xz | |
community/soundtouch: security upgrade to 2.1.2
CVE-2018-17096 soundtouch: Assertion failure in BPMDetect class in
BPMDetect.cpp
CVE-2018-17097 soundtouch: Double free in WavFileBase class in
WavFile.cpp
CVE-2018-17098 soundtouch: Heap corruption in WavFileBase class in
WavFile.cpp
fixes #9881
Diffstat (limited to 'community/soundtouch')
| -rw-r--r-- | community/soundtouch/APKBUILD | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/community/soundtouch/APKBUILD b/community/soundtouch/APKBUILD index ebc83aa801..7ac42124e2 100644 --- a/community/soundtouch/APKBUILD +++ b/community/soundtouch/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa <ncopa@alpinelinux.org> pkgname=soundtouch -pkgver=2.0.0 +pkgver=2.1.2 pkgrel=0 pkgdesc="Audio Processing library for changing Tempo, Pitch and Playback Rates" url="http://www.surina.net/soundtouch/" @@ -11,8 +11,14 @@ depends_dev="" makedepends="$depends_dev autoconf automake libtool" install="" subpackages="$pkgname-dev $pkgname-doc" -source="http://www.surina.net/$pkgname/$pkgname-$pkgver.tar.gz" -builddir="$srcdir"/soundtouch +source="https://gitlab.com/soundtouch/soundtouch/-/archive/$pkgver/soundtouch-$pkgver.tar.bz2" +builddir="$srcdir"/soundtouch-$pkgver + +# secfixes: +# 2.1.2-r0: +# - CVE-2018-17096 +# - CVE-2018-17097 +# - CVE-2018-17098 prepare() { default_prepare @@ -41,4 +47,4 @@ package() { rm -rf "$pkgdir"/usr/doc } -sha512sums="c916bdd2cb3d7547f264b1caf09b739b48a161c8c6288c3893fc97379546ed6b41dafaf603b583fbf64ae91270fdeb90811e5b0df0e9c051dc9f6ddca4d319f9 soundtouch-2.0.0.tar.gz" +sha512sums="d45cb0f94e3df32e9c76722a148f201277b2ddc3e390394c1f4ae1263f13557c6b664e90301b5f62d7561d743ab4903a44a34ab7248880b343d581cebd5f0cd9 soundtouch-2.1.2.tar.bz2" |