From owner-svn-ports-head@freebsd.org Sun Jan 17 10:21:23 2016 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 22830A85FB9; Sun, 17 Jan 2016 10:21:23 +0000 (UTC) (envelope-from riggs@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id F1AAD146F; Sun, 17 Jan 2016 10:21:22 +0000 (UTC) (envelope-from riggs@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u0HALMrI044782; Sun, 17 Jan 2016 10:21:22 GMT (envelope-from riggs@FreeBSD.org) Received: (from riggs@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u0HALLm0044777; Sun, 17 Jan 2016 10:21:21 GMT (envelope-from riggs@FreeBSD.org) Message-Id: <201601171021.u0HALLm0044777@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: riggs set sender to riggs@FreeBSD.org using -f From: Thomas Zander Date: Sun, 17 Jan 2016 10:21:21 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r406295 - in head/multimedia: mencoder mplayer X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 10:21:23 -0000 Author: riggs Date: Sun Jan 17 10:21:21 2016 New Revision: 406295 URL: https://svnweb.freebsd.org/changeset/ports/406295 Log: Build with ffmpeg-2.8.5; fix zero-day remote vulnerability Both mentioned CVE IDs refer to vulnerabilities where a remote attacker can read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file. Building with 2.8.5 fixes those. MFH: 2016Q1 Security: CVE-2016-1897 CVE-2016-1898 Modified: head/multimedia/mencoder/Makefile head/multimedia/mencoder/distinfo head/multimedia/mplayer/Makefile head/multimedia/mplayer/Makefile.common head/multimedia/mplayer/distinfo Modified: head/multimedia/mencoder/Makefile ============================================================================== --- head/multimedia/mencoder/Makefile Sun Jan 17 10:14:49 2016 (r406294) +++ head/multimedia/mencoder/Makefile Sun Jan 17 10:21:21 2016 (r406295) @@ -3,7 +3,7 @@ PORTNAME= mencoder PORTVERSION= ${MPLAYER_PORT_VERSION} -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= multimedia audio MAINTAINER= riggs@FreeBSD.org Modified: head/multimedia/mencoder/distinfo ============================================================================== --- head/multimedia/mencoder/distinfo Sun Jan 17 10:14:49 2016 (r406294) +++ head/multimedia/mencoder/distinfo Sun Jan 17 10:21:21 2016 (r406295) @@ -1,4 +1,4 @@ -SHA256 (ffmpeg-2.8.4.tar.bz2) = 83cc8136a7845546062a43cda9ae3cf0a02f43ef5e434d2f997f055231a75f8e -SIZE (ffmpeg-2.8.4.tar.bz2) = 8579383 +SHA256 (ffmpeg-2.8.5.tar.bz2) = 3b6d9951533323ee64a21d0aa7667a780b3470bfe4e0fb7c1b33307ce290615a +SIZE (ffmpeg-2.8.5.tar.bz2) = 8580755 SHA256 (mplayer-1.2.20151219.tar.xz) = f11d1100a1c37ec9e3e19c7698baf77871ae305ae431ec4a3dc187ca9316e4a2 SIZE (mplayer-1.2.20151219.tar.xz) = 5167716 Modified: head/multimedia/mplayer/Makefile ============================================================================== --- head/multimedia/mplayer/Makefile Sun Jan 17 10:14:49 2016 (r406294) +++ head/multimedia/mplayer/Makefile Sun Jan 17 10:21:21 2016 (r406295) @@ -3,7 +3,7 @@ PORTNAME= mplayer PORTVERSION= ${MPLAYER_PORT_VERSION} -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= multimedia audio MAINTAINER= riggs@FreeBSD.org Modified: head/multimedia/mplayer/Makefile.common ============================================================================== --- head/multimedia/mplayer/Makefile.common Sun Jan 17 10:14:49 2016 (r406294) +++ head/multimedia/mplayer/Makefile.common Sun Jan 17 10:21:21 2016 (r406295) @@ -6,7 +6,7 @@ MPLAYER_SNAPSHOT_DATE= 2015-12-19 MPLAYER_PORT_VERSION= 1.2.r${MPLAYER_SNAPSHOT_DATE:S/-//g} -FFMPEG_VERSION= 2.8.4 +FFMPEG_VERSION= 2.8.5 MASTER_SITES= LOCAL/riggs/mplayer:local \ http://ffmpeg.org/releases/:ffmpeg DISTFILES+= ffmpeg-${FFMPEG_VERSION}.tar.bz2:ffmpeg \ Modified: head/multimedia/mplayer/distinfo ============================================================================== --- head/multimedia/mplayer/distinfo Sun Jan 17 10:14:49 2016 (r406294) +++ head/multimedia/mplayer/distinfo Sun Jan 17 10:21:21 2016 (r406295) @@ -1,4 +1,4 @@ -SHA256 (ffmpeg-2.8.4.tar.bz2) = 83cc8136a7845546062a43cda9ae3cf0a02f43ef5e434d2f997f055231a75f8e -SIZE (ffmpeg-2.8.4.tar.bz2) = 8579383 +SHA256 (ffmpeg-2.8.5.tar.bz2) = 3b6d9951533323ee64a21d0aa7667a780b3470bfe4e0fb7c1b33307ce290615a +SIZE (ffmpeg-2.8.5.tar.bz2) = 8580755 SHA256 (mplayer-1.2.20151219.tar.xz) = f11d1100a1c37ec9e3e19c7698baf77871ae305ae431ec4a3dc187ca9316e4a2 SIZE (mplayer-1.2.20151219.tar.xz) = 5167716