From owner-cvs-ports@FreeBSD.ORG Sun Nov 9 16:04:24 2008 Return-Path: Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 46943106564A; Sun, 9 Nov 2008 16:04:24 +0000 (UTC) (envelope-from miwi@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 32CF88FC2C; Sun, 9 Nov 2008 16:04:24 +0000 (UTC) (envelope-from miwi@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id mA9G4ORn096478; Sun, 9 Nov 2008 16:04:24 GMT (envelope-from miwi@repoman.freebsd.org) Received: (from miwi@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id mA9G4Odk096477; Sun, 9 Nov 2008 16:04:24 GMT (envelope-from miwi) Message-Id: <200811091604.mA9G4Odk096477@repoman.freebsd.org> From: Martin Wilke Date: Sun, 9 Nov 2008 16:04:24 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/multimedia/vlc Makefile ports/multimedia/vlc/files patch-modules__access__vcd__cdrom.c X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Nov 2008 16:04:24 -0000 miwi 2008-11-09 16:04:24 UTC FreeBSD ports repository Modified files: multimedia/vlc Makefile Added files: multimedia/vlc/files patch-modules__access__vcd__cdrom.c Log: Fix a stack overflow vulnerability while parsing malformed cue files. The vulnerability may be exploited by a (remote) attacker to execute arbitrary code in the context of VLC media player. PR: 128660 Submitted by: "Joseph S. Atkinson" (maintainer) Security: http://www.vuxml.org/freebsd/4b09378e-addb-11dd-a578-0030843d3802.html Revision Changes Path 1.178 +1 -1 ports/multimedia/vlc/Makefile 1.1 +111 -0 ports/multimedia/vlc/files/patch-modules__access__vcd__cdrom.c (new)