Subject: CVS commit: pkgsrc/multimedia/mpeg_encode
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 10/05/2005 11:45:46
Module Name: pkgsrc
Committed By: salo
Date: Wed Oct 5 11:45:46 UTC 2005
Modified Files:
pkgsrc/multimedia/mpeg_encode: Makefile distinfo
pkgsrc/multimedia/mpeg_encode/patches: patch-ae
Added Files:
pkgsrc/multimedia/mpeg_encode/patches: patch-ah patch-ai patch-aj
patch-ak patch-al patch-am patch-an
Log Message:
Security fixes for SA17008:
"Vulnerabilities in Berkeley MPEG Tools can be exploited by malicious, local
users to perform certain actions on a vulnerable system with escalated
privileges. The vulnerabilities are caused due to temporary files being
created insecurely in "/tmp."
http://secunia.com/advisories/17008/
http://www.gentoo.org/security/en/glsa/glsa-200510-02.xml
Patches from Gentoo.
To generate a diff of this commit:
cvs rdiff -r1.8 -r1.9 pkgsrc/multimedia/mpeg_encode/Makefile
cvs rdiff -r1.3 -r1.4 pkgsrc/multimedia/mpeg_encode/distinfo
cvs rdiff -r1.1.1.1 -r1.2 pkgsrc/multimedia/mpeg_encode/patches/patch-ae
cvs rdiff -r0 -r1.1 pkgsrc/multimedia/mpeg_encode/patches/patch-ah \
pkgsrc/multimedia/mpeg_encode/patches/patch-ai \
pkgsrc/multimedia/mpeg_encode/patches/patch-aj \
pkgsrc/multimedia/mpeg_encode/patches/patch-ak \
pkgsrc/multimedia/mpeg_encode/patches/patch-al \
pkgsrc/multimedia/mpeg_encode/patches/patch-am \
pkgsrc/multimedia/mpeg_encode/patches/patch-an
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.