cvs commit: ports/multimedia/vlc Makefile ports/multimedia/vlc/files patch-modules__access__vcd__cdrom.c

[Martin Wilke]

miwi        2008-11-09 16:04:24 UTC

  FreeBSD ports repository

  Modified files:
    multimedia/vlc       Makefile 
  Added files:
    multimedia/vlc/files patch-modules__access__vcd__cdrom.c 
  Log:
  Fix a stack overflow vulnerability while parsing malformed cue files.
  The vulnerability may be exploited by a (remote) attacker to execute
  arbitrary code in the context of VLC media player.
  
  PR:             128660
  Submitted by:   "Joseph S. Atkinson" <jsa at wickedmachine.net> (maintainer)
  Security:       http://www.vuxml.org/freebsd/4b09378e-addb-11dd-a578-0030843d3802.html
  
  Revision  Changes    Path
  1.178     +1 -1      ports/multimedia/vlc/Makefile
  1.1       +111 -0    ports/multimedia/vlc/files/patch-modules__access__vcd__cdrom.c (new)