From owner-cvs-ports@FreeBSD.ORG Wed May 13 08:51:44 2009 Return-Path: Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A8055106564A; Wed, 13 May 2009 08:51:44 +0000 (UTC) (envelope-from hrs@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 960DD8FC1B; Wed, 13 May 2009 08:51:44 +0000 (UTC) (envelope-from hrs@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4D8pikx075703; Wed, 13 May 2009 08:51:44 GMT (envelope-from hrs@repoman.freebsd.org) Received: (from hrs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4D8pidB075702; Wed, 13 May 2009 08:51:44 GMT (envelope-from hrs) Message-Id: <200905130851.n4D8pidB075702@repoman.freebsd.org> From: Hiroki Sato Date: Wed, 13 May 2009 08:51:44 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/french/acroread9 distinfo ports/german/acroread9 distinfo ports/japanese/acroread9 distinfo ports/print/acroread9 Makefile distinfo X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2009 08:51:45 -0000 hrs 2009-05-13 08:51:44 UTC FreeBSD ports repository Modified files: french/acroread9 distinfo german/acroread9 distinfo japanese/acroread9 distinfo print/acroread9 Makefile distinfo Log: Update to 9.1.1. Two critical vulnerabilities have been fixed: - CVE-2009-1492 The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments. - CVE-2009-1493 The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 8.1.4 and 9.1 on Linux allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument. Security: CVE-2009-1492 Security: CVE-2009-1493 Security: http://www.adobe.com/support/security/bulletins/apsb09-06.html Revision Changes Path 1.2 +3 -3 ports/french/acroread9/distinfo 1.2 +3 -3 ports/german/acroread9/distinfo 1.2 +3 -3 ports/japanese/acroread9/distinfo 1.4 +4 -5 ports/print/acroread9/Makefile 1.2 +3 -3 ports/print/acroread9/distinfo