This update fixes a vulnerability in mplayer's demuxer and a build problem that has been reported: - Introduce files/patch-CVE-2008-5616 - Use additional configure arguments that fix a build problem in ports/128085 (this pr can be closed then) - I hope a small change of configure arguments also fixes ports/128074 but this needs to be confirmed as I am not able to reproduce the mentioned problem Fix: The attached patch file contains a diff for both multimedia/mplayer and multimedia/mencoder. Patch attached with submission follows:
Responsible Changed From-To: freebsd-ports-bugs->miwi I'll take it.
State Changed From-To: open->feedback Hi Thomas, Looks like your patch are broke the build, could you please take a look? http://i386.miwibox.org/index.php?action=describe_port&id=705 http://amd64.miwibox.org/index.php?action=describe_port&id=731 Thanks Martin
On Tue, Dec 30, 2008 at 18:55, <miwi@freebsd.org> wrote: > Looks like your patch are broke the build, could you please take a look? Indeed, I was able to reproduce your build problem. Can you try the attached diff instead? Merci, Riggs
miwi 2009-01-06 18:57:27 UTC FreeBSD ports repository Modified files: multimedia/mencoder Makefile multimedia/mplayer Makefile Makefile.shared Added files: multimedia/mplayer/files patch-CVE-2008-5616 Log: - Use additional configure arguments that fix a build problem in ports/128085 - Small change of configure arguments also fixes ports/128074 - Fix a stack buffer overflow vulnerability while parsing malformed TwinVQ media files. - Bump PORTREVISION PR: 129810 Submitted by: Thomas Zander <riggs@rrr.de> (maintainer) Security: http://www.vuxml.org/freebsd/7c5bd5b8-d652-11dd-a765-0030843d3802.html Revision Changes Path 1.7 +2 -1 ports/multimedia/mencoder/Makefile 1.180 +1 -0 ports/multimedia/mplayer/Makefile 1.4 +1 -2 ports/multimedia/mplayer/Makefile.shared 1.1 +55 -0 ports/multimedia/mplayer/files/patch-CVE-2008-5616 (new) _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: feedback->closed Committed. Thanks!