Subject: [alpine-aports] [PATCH] community/libzip: bump version to 1.3.0, fixes CVE-2017-14107

From: Daniel Isaksen <[email-masked]>
Date: Thu, 7 Sep 2017 17:02:49 +0200

---
 community/libzip/APKBUILD | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/community/libzip/APKBUILD b/community/libzip/APKBUILD
index 555fdfa92d..15018df99a 100644
--- a/community/libzip/APKBUILD
+++ b/community/libzip/APKBUILD
@@ -2,8 +2,8 @@
 # Contributor: Jose-Luis Rivas <[email-masked]>
 # Maintainer: Carlo Landmeter <[email-masked]>
 pkgname=libzip
-pkgver=1.2.0
-pkgrel=1
+pkgver=1.3.0
+pkgrel=0
 pkgdesc="A C library for reading, creating, and modifying zip archives"
 url="http://www.nih.at/libzip/index.html"
 arch="all"
@@ -15,6 +15,11 @@ subpackages="$pkgname-dev $pkgname-doc $pkgname-tools"
 source="http://www.nih.at/libzip/$pkgname-$pkgver.tar.gz"
 
 builddir="$srcdir/$pkgname-$pkgver"
+
+# secfixes:
+#   1.3.0:
+#     - CVE-2017-14107
+
 build() {
 	cd "$builddir"
 	./configure \
@@ -41,4 +46,4 @@ tools() {
 	mv "$pkgdir"/usr/bin "$subpkgdir"/usr || return 1
 }
 
-sha512sums="b71642a80f8e2573c9082d513018bfd2d1d155663ac83fdf7ec969a08d5230fcbc76f2cf89c26ff1d1288e9f407ba9fa234604d813ed3bab816ca1670f7a53f3  libzip-1.2.0.tar.gz"
+sha512sums"8cffbcd27b9e6c9676c5224c5784190bff881ac690ce0f58702b17c99ee6d1c14eda266298841f896a02233d2eb5f4147d5c8b4ad55d36c384eaa560fd96ff89  libzip-1.2.0.tar.gz"
-- 
2.11.0

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---