Subject: CVS commit: pkgsrc/audio/mpg123
From: Nia Alarie
Date: 2019-08-31 16:24:19
Message id: 20190831142419.B8378FBF4@cvs.NetBSD.org

Log Message:
mpg123: Update to 1.25.12

libmpg123:

    Fix an out-of-bounds read of maximal two bytes for truncated RVA2 frames \ 
(oss-fuzz-bug 15975). The earlier fix around the same location needed one \ 
thought more. Actually, another though was needed, oss-fuzz-bug 16009 documents \ 
the incomplete fix.
    Fix an invalid write of one zero byte for empty ID3v2 frames that demand \ 
de-unsyncing (oss-fuzz-bug 16050).
    Correct preprocessor syntax in mangle.h, no #error in a #define line. (bug \ 
273, thanks to nmlgc).

Files:
RevisionActionfile
1.50modifypkgsrc/audio/mpg123/Makefile.common
1.50modifypkgsrc/audio/mpg123/distinfo