From owner-freebsd-questions@FreeBSD.ORG  Wed Oct 18 03:34:48 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6FF0C16A416
	for <freebsd-questions@freebsd.org>;
	Wed, 18 Oct 2006 03:34:48 +0000 (UTC)
	(envelope-from ajm91qw@sbcglobal.net)
Received: from smtp113.sbc.mail.mud.yahoo.com (smtp113.sbc.mail.mud.yahoo.com
	[68.142.198.212])
	by mx1.FreeBSD.org (Postfix) with SMTP id DAA4C43D55
	for <freebsd-questions@freebsd.org>;
	Wed, 18 Oct 2006 03:34:46 +0000 (GMT)
	(envelope-from ajm91qw@sbcglobal.net)
Received: (qmail 47067 invoked from network); 18 Oct 2006 03:34:44 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=sbcglobal.net;
	h=Received:Date:From:To:Subject:Message-ID:References:MIME-Version:Content-Type:Content-Disposition:In-Reply-To:User-Agent;
	b=GKOKyMwB8zgn6mecQXV+zVUupXsCzD5G1RcAVdsLBCFZonhngJMGxorhwbNZ00c0MyUSkYOGtWO52SrFacpZ/4x4OlA3jjDrUEZCdVIZvU+JE/X8HFkj9otV3+TLKAG6Emg20zIh5gw7VzAYygVcWNyXc4RpCknhHpRI+r0hyCk=
	; 
Received: from unknown (HELO localhost) (ajm91qw@sbcglobal.net@70.251.196.4
	with plain)
	by smtp113.sbc.mail.mud.yahoo.com with SMTP; 18 Oct 2006 03:34:44 -0000
Date: Tue, 17 Oct 2006 22:37:04 -0500
From: ajm <ajm91qw@sbcglobal.net>
To: freebsd-questions@freebsd.org
Message-ID: <20061018033704.GA791@powerfull.bsd>
References: <4534DB69.1000802@2ainfo.it> <20061018003059.11deef50@localhost>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20061018003059.11deef50@localhost>
User-Agent: Mutt/1.5.13 (2006-08-11)
Subject: Re: Problem updating mplayer
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Oct 2006 03:34:48 -0000

On Wed, Oct 18, 2006 at 12:30:59AM +1000, Norberto Meijome wrote:
> On Tue, 17 Oct 2006 15:32:25 +0200
> Filippo Moretti <gunnut@2ainfo.it> wrote:
> 
> > ===>    Verifying reinstall for   
> > /usr/local/lib/win32/win32-codecs-3.1.0.p8_1,1 in 
> > /usr/ports/multimedia/win32-codecs
> > ===>  win32-codecs-3.1.0.p8_1,1 is forbidden: Remote code execution:   
> > http://vuxml.FreeBSD.org/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html.
> > *** Error code 1
> > What can be done to solve this problem
> > sincerely
> 
> Hi Filippo,
> a) you can work with the win32-codecs team to solve the remote code execution
> vulnerability
> b) you can be brave, reckless and probably 0wn3d  soon by disabling the
> vulnerability checks and upgrading anyway (dont know how to do this, sorry)
> c) you can keep the slightly older port .... but it seems it is still
> vulnerable:
> $ sudo portaudit
> [...]
> Affected package: win32-codecs-3.1.0.p8,1
> Type of problem: win32-codecs -- multiple vulnerabilities.
> Reference:
> <http://www.FreeBSD.org/ports/portaudit/24f6b1eb-43d5-11db-81e1-000e0c2e438a.html>
> 
> d) you can uninstall win32-codecs :)
> 
> other options may be available, but i can't think of them atm :)
> 
> B
> 
> _________________________
> {Beto|Norberto|Numard} Meijome
> 
> RTFM and STFW before anything bad happens.
> 

"Try the following as root or su to root"

cd /usr/ports/multimedia/mplayer
make config

"then deselect from the menu the Win32 option"

make install clean

"note:  you will not have win32 codecs support"
-- 
Alex
FreeBSD 6.0-RELEASE i386