From 4bdd1b69c7fc06acbc0f138c9d2f66ec1f4d5e30 Mon Sep 17 00:00:00 2001
From: J0WI <J0WI@users.noreply.github.com>
Date: Sun, 3 Nov 2024 14:52:12 +0100
Subject: [PATCH] main/mpg123: upgrade to 1.32.9
---
main/mpg123/APKBUILD | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
diff --git a/main/mpg123/APKBUILD b/main/mpg123/APKBUILD
index 88ebf61a732d..f8441333e53a 100644
--- a/main/mpg123/APKBUILD
+++ b/main/mpg123/APKBUILD
@@ -1,17 +1,21 @@
# Contributor: Leo <thinkabit.ukim@gmail.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=mpg123
-pkgver=1.32.8
+pkgver=1.32.9
pkgrel=0
pkgdesc="Console-based MPEG Audio Player for Layers 1, 2 and 3"
options="libtool"
-url="https://www.mpg123.org"
+url="https://www.mpg123.org/"
arch="all"
license="LGPL-2.1-only"
subpackages="$pkgname-libs $pkgname-dev $pkgname-doc"
makedepends="libtool alsa-lib-dev linux-headers"
source="https://www.mpg123.org/download/mpg123-$pkgver.tar.bz2"
+# secfixes:
+# 1.32.8-r0:
+# - CVE-2024-10573
+
build() {
CFLAGS="$CFLAGS -flto=auto" \
./configure \
@@ -37,5 +41,5 @@ package() {
}
sha512sums="
-2a3441a7c40c6bd4093431c7342bc1d97549cd5e4f822f1148a4225fa3d184c739c48ae18a5ba763af8c13f04cba87b203fabe5d4a946e79f647238b857258b2 mpg123-1.32.8.tar.bz2
+dccb640b0845061811cb41bf145587e7093556d686d49a748232b079659b46284b6cc40db42d14febceac11277c58edf2b69d1b4c46c223829a3d15478e2e26c mpg123-1.32.9.tar.bz2
"
--
GitLab