Subject: CVS commit: [pkgsrc-2008Q4] pkgsrc/audio/libaudiofile
From: Matthias Scheler
Date: 2009-01-22 21:21:28
Message id: 20090122202128.87100175D0@cvs.netbsd.org

Log Message:
Pullup ticket #2652 - requested by drochner
libaudiofile: security patch

Revisions pulled up:
audio/libaudiofile/Makefile			1.43
audio/libaudiofile/distinfo			1.12
audio/libaudiofile/patches/patch-ac		1.1
audio/libaudiofile/patches/patch-ad		1.1
---
Module Name:	pkgsrc
Committed By:	drochner
Date:		Wed Jan 21 15:19:27 UTC 2009

Modified Files:
	pkgsrc/audio/libaudiofile: Makefile distinfo
Added Files:
	pkgsrc/audio/libaudiofile/patches: patch-ac patch-ad

Log Message:
(attempt to) fix CVE-2008-5824 (buffer overflow in msadpcm.c),
see Debian bug #510205, just done correctly.
The IMA code might have similar problems. The code appearently can't
handle stereo files correctly anyway, so bail out if >1 channel
which should avoid the problem.
bump PKGREVISION

Files:
RevisionActionfile
1.42.10.1modifypkgsrc/audio/libaudiofile/Makefile
1.11.34.1modifypkgsrc/audio/libaudiofile/distinfo
1.1.2.2addpkgsrc/audio/libaudiofile/patches/patch-ac
1.1.2.2addpkgsrc/audio/libaudiofile/patches/patch-ad