From 1eb9bb6dc735dc71d8dee16868ee7f9f121db525 Mon Sep 17 00:00:00 2001
From: Holger Hans Peter Freyther <zecke@selfish.org>
Date: Tue, 16 Mar 2010 10:18:17 +0800
Subject: streamripper: Upgrade to 1.64.6 to address multiple buffer overflows

Address CVE-2008-4829 which was fixed in 1.64.0
---
 conf/checksums.ini                           |  8 --------
 recipes/streamripper/streamripper_1.61.10.bb | 15 ---------------
 recipes/streamripper/streamripper_1.64.6.bb  | 17 +++++++++++++++++
 3 files changed, 17 insertions(+), 23 deletions(-)
 delete mode 100644 recipes/streamripper/streamripper_1.61.10.bb
 create mode 100644 recipes/streamripper/streamripper_1.64.6.bb

diff --git a/conf/checksums.ini b/conf/checksums.ini
index 63cf4156f0..0a63d0c752 100644
--- a/conf/checksums.ini
+++ b/conf/checksums.ini
@@ -25610,14 +25610,6 @@ sha256=ba8c492c1b2033d4e2131f05df9e3780d4bc35bea87aa32a6052dd53a814e288
 md5=e9449fcee97e6a8ed73934c883c870e0
 sha256=95e7b7470e04f22c3ec8dc6d0b1fdd8944306cb5313c84c4545cd83abada26d0
 
-[http://downloads.sourceforge.net/streamripper/streamripper-1.61.10.tar.gz]
-md5=2d62a4546521980e1ed705a5094a6ec3
-sha256=08ca63620c1c071f4b2d42c5f63f38cee920aa57cde151ac3cfcf344437e3f11
-
-[http://heanet.dl.sourceforge.net/streamripper/streamripper-1.61.10.tar.gz]
-md5=2d62a4546521980e1ed705a5094a6ec3
-sha256=08ca63620c1c071f4b2d42c5f63f38cee920aa57cde151ac3cfcf344437e3f11
-
 [http://downloads.sourceforge.net/streamripper/streamripper-1.61.3.tar.gz]
 md5=57cd09098917bda29f841d366649681c
 sha256=1747aee9fa4cc09b49e0fb14baace3293f8f870c0de27fd3550cde21d99e9cd7
diff --git a/recipes/streamripper/streamripper_1.61.10.bb b/recipes/streamripper/streamripper_1.61.10.bb
deleted file mode 100644
index fe691400ac..0000000000
--- a/recipes/streamripper/streamripper_1.61.10.bb
+++ /dev/null
@@ -1,15 +0,0 @@
-DESCRIPTION = "StreamRipper lets you record streaming mp3 to your hard drive."
-SECTION = "console/multimedia"
-LICENSE = "GPL"
-DEPENDS= "libogg libvorbis"
-RDEPENDS= "libogg libvorbis"
-
-SRC_URI = "${SOURCEFORGE_MIRROR}/streamripper/streamripper-${PV}.tar.gz"
-
-EXTRA_OECONF="--disable-oggtest \
-		--disable-vorbistest \
-		--with-ogg=${STAGING_LIBDIR} \
-		--with-vorbis=${STAGING_LIBDIR}"
-
-inherit autotools
-
diff --git a/recipes/streamripper/streamripper_1.64.6.bb b/recipes/streamripper/streamripper_1.64.6.bb
new file mode 100644
index 0000000000..f8141cf06c
--- /dev/null
+++ b/recipes/streamripper/streamripper_1.64.6.bb
@@ -0,0 +1,17 @@
+DESCRIPTION = "StreamRipper lets you record streaming mp3 to your hard drive."
+SECTION = "console/multimedia"
+LICENSE = "GPL"
+DEPENDS= "libogg libvorbis"
+RDEPENDS= "libogg libvorbis"
+
+SRC_URI = "${SOURCEFORGE_MIRROR}/streamripper/streamripper-${PV}.tar.gz;name=src"
+SRC_URI[src.md5sum] = "a37a1a8b8f9228522196a122a1c2dd32"
+SRC_URI[src.sha256sum] = "c1d75f2e9c7b38fd4695be66eff4533395248132f3cc61f375196403c4d8de42"
+
+EXTRA_OECONF="--disable-oggtest \
+		--disable-vorbistest \
+		--with-ogg=${STAGING_LIBDIR} \
+		--with-vorbis=${STAGING_LIBDIR}"
+
+inherit autotools
+
-- 
cgit v1.2.3