cvs commit: ports/multimedia/vlc Makefile ports/multimedia/vlc/files patch-modules__access__vcd__cdrom.c

[Pav Lucistnik]

Tags slipped

Martin Wilke píše v ne 09. 11. 2008 v 16:04 +0000:
> miwi        2008-11-09 16:04:24 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     multimedia/vlc       Makefile 
>   Added files:
>     multimedia/vlc/files patch-modules__access__vcd__cdrom.c 
>   Log:
>   Fix a stack overflow vulnerability while parsing malformed cue files.
>   The vulnerability may be exploited by a (remote) attacker to execute
>   arbitrary code in the context of VLC media player.
>   
>   PR:             128660
>   Submitted by:   "Joseph S. Atkinson" <jsa at wickedmachine.net> (maintainer)
>   Security:       http://www.vuxml.org/freebsd/4b09378e-addb-11dd-a578-0030843d3802.html
>   
>   Revision  Changes    Path
>   1.178     +1 -1      ports/multimedia/vlc/Makefile
>   1.1       +111 -0    ports/multimedia/vlc/files/patch-modules__access__vcd__cdrom.c (new)
> 
-- 
Pav Lucistnik <pav at oook.cz>
              <pav at FreeBSD.org>
One Unix to rule them all, One Resolver to find them, One IP to bring
them all and in the zone to bind them.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: Toto je =?UTF-8?Q?digit=C3=A1ln=C4=9B?=
	=?ISO-8859-1?Q?_podepsan=E1?= =?UTF-8?Q?_=C4=8D=C3=A1st?=
	=?ISO-8859-1?Q?_zpr=E1vy?=
Url : http://lists.freebsd.org/pipermail/cvs-ports/attachments/20081109/4e7eaf00/attachment.pgp