From 406d0d9f3fd9ad88b701b07019ac69ee7d7d19b1 Mon Sep 17 00:00:00 2001 From: Josef Schlehofer Date: Thu, 16 Jul 2020 19:13:24 +0200 Subject: [PATCH] libvorbisidec: update to version 20180319 Fixes CVE-2018-5147 - Change PKG_SOURCE_URL fatal: unable to access 'https://git.xiph.org/tremor.git/': Failed to connect to git.xiph.org port 443: Connection refused because they changed the URL of the repository - Removes PKG_SOURCE_SUBDIR and PKG_SOURCE Those are already defaults - Fix indentation in description Signed-off-by: Josef Schlehofer --- libs/libvorbisidec/Makefile | 21 +++++++++------------ 1 file changed, 9 insertions(+), 12 deletions(-) diff --git a/libs/libvorbisidec/Makefile b/libs/libvorbisidec/Makefile index 93b938fab..7d751631c 100644 --- a/libs/libvorbisidec/Makefile +++ b/libs/libvorbisidec/Makefile @@ -6,19 +6,16 @@ include $(TOPDIR)/rules.mk PKG_NAME:=libvorbisidec -PKG_REV:=20150104 +PKG_REV:=20180319 PKG_VERSION:=1.0.3-$(PKG_REV) -PKG_RELEASE:=3 +PKG_RELEASE:=1 PKG_SOURCE_PROTO:=git -PKG_SOURCE_URL:=https://git.xiph.org/tremor.git -PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION) -PKG_SOURCE_VERSION:=b56ffce0c0773ec5ca04c466bc00b1bbcaf65aef -PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz -PKG_MIRROR_HASH:=a5095464c58c5e0909025bf4cdfdcdc07742f545b696829c97514481b9ba64db +PKG_SOURCE_URL:=https://gitlab.xiph.org/xiph/tremor.git +PKG_SOURCE_VERSION:=7c30a66346199f3f09017a09567c6c8a3a0eedc8 +PKG_MIRROR_HASH:=9cdec0bf6663d7c9e615dd556a2f115efccded884fe52c8dd18b42120781bed0 PKG_MAINTAINER:=Ted Hess - PKG_LICENSE:=BSD-3-Clause PKG_LICENSE_FILES:=COPYING @@ -37,10 +34,10 @@ define Package/libvorbisidec endef define Package/libvorbisidec/description - libvorbisidec is "tremor", a fixed-point implementation of libvorbis. - It also has libogg built-in. It is suitable as a replacement for - libvorbis and libogg in tremor-aware applications. - Tremor is a decoder only. + libvorbisidec is "tremor", a fixed-point implementation of libvorbis. + It also has libogg built-in. It is suitable as a replacement for + libvorbis and libogg in tremor-aware applications. + Tremor is a decoder only. endef TARGET_CFLAGS += $(FPIC)