On Tue, Sep 12, 2023 at 07:39:31AM -0600, Landry Breuil wrote: > CVSROOT: /cvs > Module name: ports > Changes by: lan...@cvs.openbsd.org 2023/09/12 07:39:31 > > Modified files: > graphics/libwebp: Makefile distinfo > > Log message: > graphics/libwebp: security update to 1.3.1 > > includes on top a fix for CVE-2023-4863: Heap buffer overflow in WebP. > > see > https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html > and https://chromium.googlesource.com/webm/libwebp/+/refs/heads/1.3.1 > > same diff from volker@ > ok tb@
This might have broken multimedia/motion: cc -D_THREAD_SAFE -I/usr/local/include -I/usr/local/include -I/usr/local/include/p11-kit-1 -I/usr/local/include -I/usr/local/include/webp -I/usr/local/include -I/usr/local/include -O2 -pipe -mfpmath=sse -msse3 -L/usr/local/lib -o motion motion.o logger.o conf.o draw.o jpegutils.o video_loopback.o video_v4l2.o video_common.o video_bktr.o netcam.o netcam_http.o netcam_ftp.o netcam_jpeg.o netcam_wget.o netcam_rtsp.o track.o alg.o event.o picture.o rotate.o translate.o ffmpeg.o util.o dbse.o webu_status.o webu.o webu_html.o webu_stream.o webu_text.o mmalcam.o /usr/local/lib/libintl.so.8.0 /usr/local/lib/libiconv.so.7.1 -Wl,-rpath,/usr/local/lib -pthread -L/usr/local/lib -ljpeg -L/usr/local/lib -lmicrohttpd -L/usr/local/lib -lwebpmux -L/usr/local/lib -Wl,-rpath-link,/usr/local/lib -Wl,-rpath-link,/usr/local/lib:/usr/X11R6/lib -lavutil -lavformat -lavcodec -lswscale -lavdevice -L/usr/local/lib -lsqlite3 motion.c(motion.o:(motion_loop)): warning: sprintf() is often misused, please use snprintf() motion.c(motion.o:(motion_loop)): warning: strcat() is almost always misused, please use strlcat() conf.c(conf.o:(copy_string)): warning: strcpy() is almost always misused, please use strlcpy() util.c(util.o:(util_parms_add)): warning: stpcpy() is dangerous; do not use it webu.c(webu.o:(webu_start)): warning: rand() may return deterministic values, is that what you want? ld: error: undefined symbol: WebPConfigInitInternal >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPPictureInitInternal >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPPictureAlloc >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPMemoryWriterInit >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPMemoryWrite >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPEncode >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPMemoryWriterClear >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPPictureFree >>> referenced by picture.c >>> picture.o:(put_picture) ld: error: undefined symbol: WebPFree >>> referenced by picture.c >>> picture.o:(put_picture) cc: error: linker command failed with exit code 1 (use -v to see invocation) gmake[2]: *** [Makefile:424: motion] Error 1 -- Antoine
