CVS commit: [pkgsrc-2018Q3] pkgsrc/multimedia/mkvtoolnix

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Oct 29 14:37:32 UTC 2018

Modified Files:
        pkgsrc/multimedia/mkvtoolnix [pkgsrc-2018Q3]: Makefile distinfo

Log Message:
Pullup ticket #5855 - requested by maya
multimedia/mkvtoolnix: security fix

Revisions pulled up:
- multimedia/mkvtoolnix/Makefile                                1.116-1.117
- multimedia/mkvtoolnix/distinfo                                1.55-1.56

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Wed Oct 24 10:55:07 UTC 2018

   Modified Files:
           pkgsrc/multimedia/mkvtoolnix: Makefile distinfo

   Log Message:
   mkvtoolnix: updated to 28.1.0

   Version 28.1.0 "Morning Child":

   Bug fixes

   * mkvmerge: AV1 parser: fixed an error in the sequence header parser if
     neither the reduced_still_picture_header nor the
     frame_id_numbers_present_flag is set.
   * mkvmerge: AV1 parser: when creating the av1C structure for the Codec
     Private element the sequence header OBU wasn't copied completely: its common
     data (type field & OBU size among others) was missing.
   * mkvmerge: Matroska reader, AV1: mkvmerge will try to re-create the av1C
     data stored in Codec Private when reading AV1 from Matroska or WebM files
     created by mkvmerge v28.0.0.
   * MKVToolNix GUI: info tool: the tool will no longer stop scanning elements
     when an EBML Void element is found after the first Cluster element.

---
   Module Name:    pkgsrc
   Committed By:   maya
   Date:           Fri Oct 26 18:09:40 UTC 2018

   Modified Files:
           pkgsrc/multimedia/mkvtoolnix: Makefile distinfo

   Log Message:
   mkvtoolnix: update to 28.2.0. security fix.

   * mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool &
     chapter editor: fixed a case of memory being accessed after it had been
     freed earlier. This can be triggered by specially crafted Matroska files and
     lead to arbitrary code execution. The vulnerability was reported as Cisco
     TALOS 2018-0694 on 2018-10-25.


To generate a diff of this commit:
cvs rdiff -u -r1.113 -r1.113.2.1 pkgsrc/multimedia/mkvtoolnix/Makefile
cvs rdiff -u -r1.52 -r1.52.2.1 pkgsrc/multimedia/mkvtoolnix/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/multimedia/mkvtoolnix/Makefile
diff -u pkgsrc/multimedia/mkvtoolnix/Makefile:1.113 pkgsrc/multimedia/mkvtoolnix/Makefile:1.113.2.1
--- pkgsrc/multimedia/mkvtoolnix/Makefile:1.113 Mon Aug 27 06:50:16 2018
+++ pkgsrc/multimedia/mkvtoolnix/Makefile       Mon Oct 29 14:37:32 2018
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.113 2018/08/27 06:50:16 adam Exp $
+# $NetBSD: Makefile,v 1.113.2.1 2018/10/29 14:37:32 bsiegert Exp $
 
-DISTNAME=      mkvtoolnix-26.0.0
+DISTNAME=      mkvtoolnix-28.2.0
 CATEGORIES=    multimedia
 MASTER_SITES=  https://mkvtoolnix.download/sources/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/multimedia/mkvtoolnix/distinfo
diff -u pkgsrc/multimedia/mkvtoolnix/distinfo:1.52 pkgsrc/multimedia/mkvtoolnix/distinfo:1.52.2.1
--- pkgsrc/multimedia/mkvtoolnix/distinfo:1.52  Mon Aug 27 06:50:16 2018
+++ pkgsrc/multimedia/mkvtoolnix/distinfo       Mon Oct 29 14:37:32 2018
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.52 2018/08/27 06:50:16 adam Exp $
+$NetBSD: distinfo,v 1.52.2.1 2018/10/29 14:37:32 bsiegert Exp $
 
-SHA1 (mkvtoolnix-26.0.0.tar.xz) = 40d0ffc866be2a427479104364e41037192687b0
-RMD160 (mkvtoolnix-26.0.0.tar.xz) = e415928dea97bc6e0cce2289ab8f8f30e59a4b5d
-SHA512 (mkvtoolnix-26.0.0.tar.xz) = 3d1822dcc381d895e6c62ca31b3edf2b2e5443d6fdfb96b9c28c19f1d3395e44938a68c751d20c4da3419c269524e4edceb795797728281de94b8b1ba57f7479
-Size (mkvtoolnix-26.0.0.tar.xz) = 4802044 bytes
+SHA1 (mkvtoolnix-28.2.0.tar.xz) = e54ee2ccc241ca3d21d7cc61daa934c51da798f0
+RMD160 (mkvtoolnix-28.2.0.tar.xz) = 903e89f5110e9eb472dbe3e16b6b7c369f2026e2
+SHA512 (mkvtoolnix-28.2.0.tar.xz) = 89c9890673a1755d203878b7cc656b44a0835bcb71f96f1f5d0f94b9bf651b95efb93c16601480f7c3c8abec16a5d655238705d84b54549ba094445236ab1efd
+Size (mkvtoolnix-28.2.0.tar.xz) = 6546844 bytes
 SHA1 (patch-build-config.in) = 89c67720f7886741dcabbbed88cfbfd31bf4ccc7