[pkgsrc/pkgsrc-2018Q3]: pkgsrc/multimedia/mkvtoolnix Pullup ticket #5855 - re...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/c952426447f8
branches:  pkgsrc-2018Q3
changeset: 408358:c952426447f8
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Mon Oct 29 14:37:32 2018 +0000

description:
Pullup ticket #5855 - requested by maya
multimedia/mkvtoolnix: security fix

Revisions pulled up:
- multimedia/mkvtoolnix/Makefile                                1.116-1.117
- multimedia/mkvtoolnix/distinfo                                1.55-1.56

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Wed Oct 24 10:55:07 UTC 2018

   Modified Files:
           pkgsrc/multimedia/mkvtoolnix: Makefile distinfo

   Log Message:
   mkvtoolnix: updated to 28.1.0

   Version 28.1.0 "Morning Child":

   Bug fixes

   * mkvmerge: AV1 parser: fixed an error in the sequence header parser if
     neither the reduced_still_picture_header nor the
     frame_id_numbers_present_flag is set.
   * mkvmerge: AV1 parser: when creating the av1C structure for the Codec
     Private element the sequence header OBU wasn't copied completely: its common
     data (type field & OBU size among others) was missing.
   * mkvmerge: Matroska reader, AV1: mkvmerge will try to re-create the av1C
     data stored in Codec Private when reading AV1 from Matroska or WebM files
     created by mkvmerge v28.0.0.
   * MKVToolNix GUI: info tool: the tool will no longer stop scanning elements
     when an EBML Void element is found after the first Cluster element.

---
   Module Name:    pkgsrc
   Committed By:   maya
   Date:           Fri Oct 26 18:09:40 UTC 2018

   Modified Files:
           pkgsrc/multimedia/mkvtoolnix: Makefile distinfo

   Log Message:
   mkvtoolnix: update to 28.2.0. security fix.

   * mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool &
     chapter editor: fixed a case of memory being accessed after it had been
     freed earlier. This can be triggered by specially crafted Matroska files and
     lead to arbitrary code execution. The vulnerability was reported as Cisco
     TALOS 2018-0694 on 2018-10-25.

diffstat:

 multimedia/mkvtoolnix/Makefile |   4 ++--
 multimedia/mkvtoolnix/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (28 lines):

diff -r 70bae1b8e9f6 -r c952426447f8 multimedia/mkvtoolnix/Makefile
--- a/multimedia/mkvtoolnix/Makefile    Mon Oct 29 07:53:23 2018 +0000
+++ b/multimedia/mkvtoolnix/Makefile    Mon Oct 29 14:37:32 2018 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.113 2018/08/27 06:50:16 adam Exp $
+# $NetBSD: Makefile,v 1.113.2.1 2018/10/29 14:37:32 bsiegert Exp $
 
-DISTNAME=      mkvtoolnix-26.0.0
+DISTNAME=      mkvtoolnix-28.2.0
 CATEGORIES=    multimedia
 MASTER_SITES=  https://mkvtoolnix.download/sources/
 EXTRACT_SUFX=  .tar.xz
diff -r 70bae1b8e9f6 -r c952426447f8 multimedia/mkvtoolnix/distinfo
--- a/multimedia/mkvtoolnix/distinfo    Mon Oct 29 07:53:23 2018 +0000
+++ b/multimedia/mkvtoolnix/distinfo    Mon Oct 29 14:37:32 2018 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.52 2018/08/27 06:50:16 adam Exp $
+$NetBSD: distinfo,v 1.52.2.1 2018/10/29 14:37:32 bsiegert Exp $
 
-SHA1 (mkvtoolnix-26.0.0.tar.xz) = 40d0ffc866be2a427479104364e41037192687b0
-RMD160 (mkvtoolnix-26.0.0.tar.xz) = e415928dea97bc6e0cce2289ab8f8f30e59a4b5d
-SHA512 (mkvtoolnix-26.0.0.tar.xz) = 3d1822dcc381d895e6c62ca31b3edf2b2e5443d6fdfb96b9c28c19f1d3395e44938a68c751d20c4da3419c269524e4edceb795797728281de94b8b1ba57f7479
-Size (mkvtoolnix-26.0.0.tar.xz) = 4802044 bytes
+SHA1 (mkvtoolnix-28.2.0.tar.xz) = e54ee2ccc241ca3d21d7cc61daa934c51da798f0
+RMD160 (mkvtoolnix-28.2.0.tar.xz) = 903e89f5110e9eb472dbe3e16b6b7c369f2026e2
+SHA512 (mkvtoolnix-28.2.0.tar.xz) = 89c9890673a1755d203878b7cc656b44a0835bcb71f96f1f5d0f94b9bf651b95efb93c16601480f7c3c8abec16a5d655238705d84b54549ba094445236ab1efd
+Size (mkvtoolnix-28.2.0.tar.xz) = 6546844 bytes
 SHA1 (patch-build-config.in) = 89c67720f7886741dcabbbed88cfbfd31bf4ccc7