[Buildroot] [PATCH 1/1] package/faad2: security bump to version 2.11.1

[Buildroot] [PATCH 1/1] package/faad2: security bump to version 2.11.1

[Fabrice Fontaine]

- Switch to cmake-package
- Fix CVE-2023-38857 and CVE-2023-38858

https://github.com/knik0/faad2/blob/2.11.1/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/faad2/faad2.hash | 2 +-
 package/faad2/faad2.mk   | 8 ++------
 2 files changed, 3 insertions(+), 7 deletions(-)

diff --git a/package/faad2/faad2.hash b/package/faad2/faad2.hash
index 3a9c36df00..b7813130fd 100644
--- a/package/faad2/faad2.hash
+++ b/package/faad2/faad2.hash
@@ -1,3 +1,3 @@
 # Locally computed
-sha256  4c16c71295ca0cbf7c3dfe98eb11d8fa8d0ac3042e41604cfd6cc11a408cf264  faad2-2.10.1.tar.gz
+sha256  72dbc0494de9ee38d240f670eccf2b10ef715fd0508c305532ca3def3225bb06  faad2-2.11.1.tar.gz
 sha256  d3baf3a54943cf12a994c85867a18dec84f810901b2f2878ddfd77efcc3c150f  COPYING
diff --git a/package/faad2/faad2.mk b/package/faad2/faad2.mk
index eecab35af8..686e5045c0 100644
--- a/package/faad2/faad2.mk
+++ b/package/faad2/faad2.mk
@@ -4,16 +4,12 @@
 #
 ################################################################################
 
-FAAD2_VERSION = 2.10.1
+FAAD2_VERSION = 2.11.1
 FAAD2_SITE = $(call github,knik0,faad2,$(FAAD2_VERSION))
 FAAD2_LICENSE = GPL-2.0
 FAAD2_LICENSE_FILES = COPYING
 FAAD2_CPE_ID_VENDOR = audiocoding
 FAAD2_CPE_ID_PRODUCT = freeware_advanced_audio_decoder_2
-# frontend/faad calls frexp()
-FAAD2_CONF_ENV = LIBS=-lm
 FAAD2_INSTALL_STAGING = YES
-# From git
-FAAD2_AUTORECONF = YES
 
-$(eval $(autotools-package))
+$(eval $(cmake-package))
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/faad2: security bump to version 2.11.1

[Yann E. MORIN]

Fabrice, All,

On 2024-01-07 12:55 +0100, Fabrice Fontaine spake thusly:
> - Switch to cmake-package
> - Fix CVE-2023-38857 and CVE-2023-38858
> 
> https://github.com/knik0/faad2/blob/2.11.1/ChangeLog
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Applied to master, thanks.

Regards,
Yann E. MORIN.

> ---
>  package/faad2/faad2.hash | 2 +-
>  package/faad2/faad2.mk   | 8 ++------
>  2 files changed, 3 insertions(+), 7 deletions(-)
> 
> diff --git a/package/faad2/faad2.hash b/package/faad2/faad2.hash
> index 3a9c36df00..b7813130fd 100644
> --- a/package/faad2/faad2.hash
> +++ b/package/faad2/faad2.hash
> @@ -1,3 +1,3 @@
>  # Locally computed
> -sha256  4c16c71295ca0cbf7c3dfe98eb11d8fa8d0ac3042e41604cfd6cc11a408cf264  faad2-2.10.1.tar.gz
> +sha256  72dbc0494de9ee38d240f670eccf2b10ef715fd0508c305532ca3def3225bb06  faad2-2.11.1.tar.gz
>  sha256  d3baf3a54943cf12a994c85867a18dec84f810901b2f2878ddfd77efcc3c150f  COPYING
> diff --git a/package/faad2/faad2.mk b/package/faad2/faad2.mk
> index eecab35af8..686e5045c0 100644
> --- a/package/faad2/faad2.mk
> +++ b/package/faad2/faad2.mk
> @@ -4,16 +4,12 @@
>  #
>  ################################################################################
>  
> -FAAD2_VERSION = 2.10.1
> +FAAD2_VERSION = 2.11.1
>  FAAD2_SITE = $(call github,knik0,faad2,$(FAAD2_VERSION))
>  FAAD2_LICENSE = GPL-2.0
>  FAAD2_LICENSE_FILES = COPYING
>  FAAD2_CPE_ID_VENDOR = audiocoding
>  FAAD2_CPE_ID_PRODUCT = freeware_advanced_audio_decoder_2
> -# frontend/faad calls frexp()
> -FAAD2_CONF_ENV = LIBS=-lm
>  FAAD2_INSTALL_STAGING = YES
> -# From git
> -FAAD2_AUTORECONF = YES
>  
> -$(eval $(autotools-package))
> +$(eval $(cmake-package))
> -- 
> 2.43.0
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot

-- 
.-----------------.--------------------.------------------.--------------------.
|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 561 099 427 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/faad2: security bump to version 2.11.1

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:

 > - Switch to cmake-package
 > - Fix CVE-2023-38857 and CVE-2023-38858

 > https://github.com/knik0/faad2/blob/2.11.1/ChangeLog

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed to 2023.02.x and 2023.11.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot