On Fri, Mar 12, 2021 at 03:50:20PM +0100, Moritz Buhl wrote:
> audio/libmysofa before version 1.2 contains the following CVE:
> CVE-2020-36148, CVE-2020-36149, CVE-2020-36150, CVE-2020-36151, CVE-2020-36152
>
> With libmysofa 1.2 I built the following ports:
> audio/openal - no make test, the only direct dependency
> audio/freealut - make test: There was an error opening the ALC device
> audio/mpd - no make test
$ /usr/src/lib/check_sym {,`make
show=WRKINST`}/usr/local/lib/libmysofa.so.0.0
No dynamic export changes
External reference changes:
added:
sscanf
PLT added:
mysofa_getAttribute
Afaict that PLT addition warrants a minor bump.
Otherwise OK kn; You can also add a CVE entry to quirks if you want.
