From owner-freebsd-security@FreeBSD.ORG  Tue Oct 10 10:40:24 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 82E2816A403;
	Tue, 10 Oct 2006 10:40:24 +0000 (UTC)
	(envelope-from dmitry@atlantis.dp.ua)
Received: from postman.atlantis.dp.ua (postman.atlantis.dp.ua [193.108.47.1])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B24B643D53;
	Tue, 10 Oct 2006 10:40:23 +0000 (GMT)
	(envelope-from dmitry@atlantis.dp.ua)
Received: from atlantis.dp.ua (localhost [127.0.0.1])
	by postman.atlantis.dp.ua (8.13.1/8.13.1) with ESMTP id k9AAeBXV032718; 
	Tue, 10 Oct 2006 13:40:12 +0300 (EEST)
	(envelope-from dmitry@atlantis.dp.ua)
Received: from localhost (dmitry@localhost)
	by atlantis.dp.ua (8.13.1/8.13.1/Submit) with ESMTP id k9AAeBpt032712; 
	Tue, 10 Oct 2006 13:40:11 +0300 (EEST)
	(envelope-from dmitry@atlantis.dp.ua)
Date: Tue, 10 Oct 2006 13:40:11 +0300 (EEST)
From: Dmitry Pryanishnikov <dmitry@atlantis.dp.ua>
To: Jose Alonso Cardenas Marquez <acm@freebsd.org>
In-Reply-To: <200610070149.k971nX1A027408@repoman.freebsd.org>
Message-ID: <20061010133106.Y13139@atlantis.atlantis.dp.ua>
References: <200610070149.k971nX1A027408@repoman.freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-security@freebsd.org
Subject: Re: cvs commit: ports/multimedia/win32-codecs Makefile distinfo
 pkg-plist
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Oct 2006 10:40:24 -0000


Hello!

On Sat, 7 Oct 2006, Jose Alonso Cardenas Marquez wrote:
>  Modified files:
>    multimedia/win32-codecs Makefile distinfo pkg-plist
>  Log:
>  - Add the REALPLAYER and QUICKTIME(off) OPTIONS. If QUICKTIME OPTION is off,
>    this port could install without problem of vulnerabilities.
>  - Bump PORTREVISION
>  - Other few modifications

   Thanks, that's great, however portaudit's vulnerabilities database still
lists the port as vulnerable:

http://www.FreeBSD.org/ports/portaudit/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html

Affects:
      * win32-codecs >0

I wonder whether it's possible to list the port there conditionally (e.g. only
if QUICKTIME option is 'off').

Sincerely, Dmitry
-- 
Atlantis ISP, System Administrator
e-mail:  dmitry@atlantis.dp.ua
nic-hdl: LYNX-RIPE