Bug 120230

Summary: Fix remote vulnerabilities of multimedia/mplayer and multimedia/mencoder
Product: Ports & Packages Reporter: Thomas E. Zander <riggs>
Component: Individual Port(s)Assignee: Martin Wilke <miwi>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description Thomas E. Zander 2008-02-03 00:00:04 UTC 
Since the release of 1.0rc2, so far 4 security bugs have been identified and patches have been made available. Some of them fix remote attack vulnerabilities.

Fix: The attached patch is a cumulative update to multimedia/mplayer and multimedia/mencoder that
o introduces a new file, files/patch-overflows-20080202 , that contains fixes for all currently known holes
o bumps PORTREVISION on both mplayer and mencoder

Patch attached with submission follows:
Comment 1 Martin Wilke freebsd_committer freebsd_triage 2008-02-05 18:50:35 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->miwi

I'll take it.
Comment 2 dfilter service freebsd_committer freebsd_triage 2008-03-06 22:38:45 UTC 
miwi        2008-03-06 22:38:40 UTC

  FreeBSD ports repository

  Modified files:
    multimedia/mplayer   Makefile 
    multimedia/mencoder  Makefile 
  Added files:
    multimedia/mplayer/files patch-overflows-20080202 
  Log:
  - Fix remote vulnerabilities
  - Bump PORTREVISION
  
  PR:             120230
  Submitted by:   Thomas Zander <riggs@rrr.de> (maintainer)
  
  Revision  Changes    Path
  1.4       +1 -0      ports/multimedia/mencoder/Makefile
  1.170     +1 -1      ports/multimedia/mplayer/Makefile
  1.1       +98 -0     ports/multimedia/mplayer/files/patch-overflows-20080202 (new)
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 3 Martin Wilke freebsd_committer freebsd_triage 2008-03-06 22:39:02 UTC 
State Changed
From-To: open->closed

Sorry for the long wait time. Committed. Thanks!