aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNatanael Copa <ncopa@alpinelinux.org>2019-01-23 19:10:03 +0000
committerNatanael Copa <ncopa@alpinelinux.org>2019-01-23 19:12:36 +0000
commitedfe8b82ee16fb40b8381d3f262ad53b8d72aaff (patch)
treef935696caa3c818edbec0f5310dae2c03f63138e
parent8b809c16866f5bb6d9311592183287272d380d83 (diff)
downloadaports-edfe8b82ee16fb40b8381d3f262ad53b8d72aaff.tar.gz
aports-edfe8b82ee16fb40b8381d3f262ad53b8d72aaff.tar.bz2
aports-edfe8b82ee16fb40b8381d3f262ad53b8d72aaff.tar.xz
community/soundtouch: security upgrade to 2.1.2
CVE-2018-17096 soundtouch: Assertion failure in BPMDetect class in BPMDetect.cpp CVE-2018-17097 soundtouch: Double free in WavFileBase class in WavFile.cpp CVE-2018-17098 soundtouch: Heap corruption in WavFileBase class in WavFile.cpp fixes #9881
-rw-r--r--community/soundtouch/APKBUILD14
1 files changed, 10 insertions, 4 deletions
diff --git a/community/soundtouch/APKBUILD b/community/soundtouch/APKBUILD
index ebc83aa801..7ac42124e2 100644
--- a/community/soundtouch/APKBUILD
+++ b/community/soundtouch/APKBUILD
@@ -1,6 +1,6 @@
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=soundtouch
-pkgver=2.0.0
+pkgver=2.1.2
pkgrel=0
pkgdesc="Audio Processing library for changing Tempo, Pitch and Playback Rates"
url="http://www.surina.net/soundtouch/"
@@ -11,8 +11,14 @@ depends_dev=""
makedepends="$depends_dev autoconf automake libtool"
install=""
subpackages="$pkgname-dev $pkgname-doc"
-source="http://www.surina.net/$pkgname/$pkgname-$pkgver.tar.gz"
-builddir="$srcdir"/soundtouch
+source="https://gitlab.com/soundtouch/soundtouch/-/archive/$pkgver/soundtouch-$pkgver.tar.bz2"
+builddir="$srcdir"/soundtouch-$pkgver
+
+# secfixes:
+# 2.1.2-r0:
+# - CVE-2018-17096
+# - CVE-2018-17097
+# - CVE-2018-17098
prepare() {
default_prepare
@@ -41,4 +47,4 @@ package() {
rm -rf "$pkgdir"/usr/doc
}
-sha512sums="c916bdd2cb3d7547f264b1caf09b739b48a161c8c6288c3893fc97379546ed6b41dafaf603b583fbf64ae91270fdeb90811e5b0df0e9c051dc9f6ddca4d319f9 soundtouch-2.0.0.tar.gz"
+sha512sums="d45cb0f94e3df32e9c76722a148f201277b2ddc3e390394c1f4ae1263f13557c6b664e90301b5f62d7561d743ab4903a44a34ab7248880b343d581cebd5f0cd9 soundtouch-2.1.2.tar.bz2"