aboutsummaryrefslogtreecommitdiffstats
path: root/main/libsndfile/APKBUILD
diff options
context:
space:
mode:
authorNatanael Copa <ncopa@alpinelinux.org>2017-07-05 07:39:03 +0000
committerNatanael Copa <ncopa@alpinelinux.org>2017-07-05 07:39:03 +0000
commit49b4ba77c180eea380f7eb5db100fc83162143e5 (patch)
tree961f7b93e028513baf145f183f8dcf41d18f6964 /main/libsndfile/APKBUILD
parent018b00c3e22e85ddc30d153966483998ecefc95d (diff)
fixes #7440
Diffstat (limited to 'main/libsndfile/APKBUILD')
-rw-r--r--main/libsndfile/APKBUILD22
1 files changed, 13 insertions, 9 deletions
diff --git a/main/libsndfile/APKBUILD b/main/libsndfile/APKBUILD
index 81f9c4d6e41..d894549ca84 100644
--- a/main/libsndfile/APKBUILD
+++ b/main/libsndfile/APKBUILD
@@ -2,7 +2,7 @@
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=libsndfile
pkgver=1.0.28
-pkgrel=0
+pkgrel=1
pkgdesc="A C library for reading and writing files containing sampled sound"
url="http://www.mega-nerd.com/libsndfile"
arch="all"
@@ -11,21 +11,23 @@ subpackages="$pkgname-dev $pkgname-doc"
depends=
depends_dev="flac-dev libvorbis-dev libogg-dev"
makedepends="linux-headers alsa-lib-dev $depends_dev"
-source="http://www.mega-nerd.com/$pkgname/files/$pkgname-$pkgver.tar.gz"
+source="http://www.mega-nerd.com/$pkgname/files/$pkgname-$pkgver.tar.gz
+ CVE-2017-8361_CVE-2017-8363_CVE-2017-8365.patch
+ CVE-2017-8362.patch
+ "
# secfixes:
# 1.0.28-r0:
# - CVE-2017-7585
# - CVE-2017-7741
# - CVE-2017-7742
+# 1.0.28-r1:
+# - CVE-2017-8361
+# - CVE-2017-8362
+# - CVE-2017-8363
+# - CVE-2017-8365
_builddir="$srcdir/$pkgname-$pkgver"
-
-prepare() {
- cd "$_builddir"
- return 0
-}
-
build () {
cd "$_builddir"
ac_cv_sys_largefile_CFLAGS="-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" \
@@ -43,4 +45,6 @@ package() {
cd "$_builddir"
make DESTDIR="$pkgdir" install || return 1
}
-sha512sums="890731a6b8173f714155ce05eaf6d991b31632c8ab207fbae860968861a107552df26fcf85602df2e7f65502c7256c1b41735e1122485a3a07ddb580aa83b57f libsndfile-1.0.28.tar.gz"
+sha512sums="890731a6b8173f714155ce05eaf6d991b31632c8ab207fbae860968861a107552df26fcf85602df2e7f65502c7256c1b41735e1122485a3a07ddb580aa83b57f libsndfile-1.0.28.tar.gz
+f98c40696fca3e7bca867df993de55bb4145c23428e65d1a669182eb2293046478ac727ae7f94bb77123ef0355c3c53be4f9d6a432665c90c74687d8d3afd9e3 CVE-2017-8361_CVE-2017-8363_CVE-2017-8365.patch
+dfd4b5f1c7471fc416eed5c6040580a020543f145de9103751adaad6ce1c5c6a22abc1cf0ffd381aed3072644cd5ee03ba3598265aa7d202d63167da251cb595 CVE-2017-8362.patch"