2023-09-29 v1.13.1 "Ugly Duckling" This release contains two security related fixes. One each for VP8 and VP9.
- Upgrading: This release is ABI compatible with the previous release. - Bug fixes: https://crbug.com/1486441 (CVE-2023-5217) Fix to a crash related to VP9 encoding (#1642) Builds fine for me on amd64 and arm64. No native tests, but vpxenc seemed to work. OK? Index: multimedia/libvpx/Makefile =================================================================== RCS file: /cvs/openbsd/ports/multimedia/libvpx/Makefile,v retrieving revision 1.51 diff -u -p -u -p -r1.51 Makefile --- multimedia/libvpx/Makefile 9 Apr 2023 06:15:33 -0000 1.51 +++ multimedia/libvpx/Makefile 1 Oct 2023 12:43:55 -0000 @@ -2,7 +2,7 @@ COMMENT= Google VP8/VP9 video codec GH_ACCOUNT= webmproject GH_PROJECT= libvpx -GH_TAGNAME= v1.13.0 +GH_TAGNAME= v1.13.1 EPOCH= 0 CATEGORIES= multimedia Index: multimedia/libvpx/distinfo =================================================================== RCS file: /cvs/openbsd/ports/multimedia/libvpx/distinfo,v retrieving revision 1.22 diff -u -p -u -p -r1.22 distinfo --- multimedia/libvpx/distinfo 9 Apr 2023 06:15:33 -0000 1.22 +++ multimedia/libvpx/distinfo 1 Oct 2023 12:44:17 -0000 @@ -1,2 +1,2 @@ -SHA256 (libvpx-1.13.0.tar.gz) = yyo5PJwfrnq6drlQuwrTk7oQVAn+GhR8zWGwqqFQEGY= -SIZE (libvpx-1.13.0.tar.gz) = 5515327 +SHA256 (libvpx-1.13.1.tar.gz) = ANroBGVWcnKr0Hf1k1X5WskdeAmi0wBvms4mN91CnRQ= +SIZE (libvpx-1.13.1.tar.gz) = 5515662 -- If you just try long enough and hard enough, you can always manage to boot yourself in the posterior. -- A. J. Liebling, "The Press"