git: 41f2a7874917 - main - graphics/webp: Patch CVE-2023-1999

From: Daniel Engberg <diizzy_at_FreeBSD.org>
Date: Tue, 06 Jun 2023 07:25:36 UTC 
The branch main has been updated by diizzy:

URL: https://cgit.FreeBSD.org/ports/commit/?id=41f2a787491797e152be1e93e545293a271695fd

commit 41f2a787491797e152be1e93e545293a271695fd
Author:     Daniel Engberg <diizzy@FreeBSD.org>
AuthorDate: 2023-06-06 07:14:02 +0000
Commit:     Daniel Engberg <diizzy@FreeBSD.org>
CommitDate: 2023-06-06 07:25:29 +0000

    graphics/webp: Patch CVE-2023-1999
    
    Backport upstream commit a486d800b60d0af4cc0836bf7ed8f21e12974129 to
    fix CVE-2023-1999
    
    Reference:
    https://security-tracker.debian.org/tracker/CVE-2023-1999
    
    PR:             271695
    Reviewed by:    sunpoet (maintainer)
---
 graphics/webp/Makefile | 4 ++++
 graphics/webp/distinfo | 4 +++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/graphics/webp/Makefile b/graphics/webp/Makefile
index b6a8e41b5e60..7e7dcef66e6f 100644
--- a/graphics/webp/Makefile
+++ b/graphics/webp/Makefile
@@ -1,10 +1,14 @@
 PORTNAME=	webp
 PORTVERSION=	1.3.0
+PORTREVISION=	1
 CATEGORIES=	graphics
 MASTER_SITES=	http://downloads.webmproject.org/releases/webp/ \
 		https://storage.googleapis.com/downloads.webmproject.org/releases/webp/
 DISTNAME=	libwebp-${PORTVERSION}
 
+PATCH_SITES=	https://github.com/webmproject/lib${PORTNAME}/commit/
+PATCHFILES=	a486d800b60d0af4cc0836bf7ed8f21e12974129.patch:-p1
+
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Google WebP image format conversion tool
 WWW=		https://developers.google.com/speed/webp
diff --git a/graphics/webp/distinfo b/graphics/webp/distinfo
index c119515789cb..98d1503c0707 100644
--- a/graphics/webp/distinfo
+++ b/graphics/webp/distinfo
@@ -1,3 +1,5 @@
-TIMESTAMP = 1674589512
+TIMESTAMP = 1685285767
 SHA256 (libwebp-1.3.0.tar.gz) = 64ac4614db292ae8c5aa26de0295bf1623dbb3985054cb656c55e67431def17c
 SIZE (libwebp-1.3.0.tar.gz) = 4148444
+SHA256 (a486d800b60d0af4cc0836bf7ed8f21e12974129.patch) = 63042ea308dba0e7e2ae324e59b852c00f372975ae6bb31bf26cff14f263a8e5
+SIZE (a486d800b60d0af4cc0836bf7ed8f21e12974129.patch) = 1792