Date: Sat, 12 Nov 2011 00:20:38 -0700 (MST) From: John Hein <jhein@symmetricom.com> To: FreeBSD-gnats-submit@FreeBSD.org Cc: emulation@FreeBSD.org Subject: ports/162498: www/linux-f10-flashplugin10 is vulnerable Message-ID: <201111120720.pAC7Kclv008455@marvin.timing.com> Resent-Message-ID: <201111120730.pAC7UAE8017768@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 162498 >Category: ports >Synopsis: www/linux-f10-flashplugin10 is vulnerable >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sat Nov 12 07:30:09 UTC 2011 >Closed-Date: >Last-Modified: >Originator: John Hein >Release: >Organization: >Environment: System: >Description: See http://www.adobe.com/support/security/bulletins/apsb11-28.html Also the download url has changed slightly, so the 10.3.r183.10 port also doesn't fetch now. While the 10.x flashplugin is still supported, this port should be updated along with 11.x (ports/162476). >How-To-Repeat: >Fix: Index: Makefile =================================================================== RCS file: /base/FreeBSD-CVS/ports/www/linux-f10-flashplugin10/Makefile,v retrieving revision 1.27 diff -u -p -r1.27 Makefile --- Makefile 31 Oct 2011 21:16:53 -0000 1.27 +++ Makefile 12 Nov 2011 06:21:12 -0000 @@ -7,9 +7,9 @@ # PORTNAME= flashplugin -PORTVERSION= 10.3r183.10 +PORTVERSION= 10.3r183.11 CATEGORIES= www multimedia linux -MASTER_SITES= http://fpdownload.macromedia.com/get/flashplayer/current/:plugin \ +MASTER_SITES= http://fpdownload.macromedia.com/get/flashplayer/pdc/${PORTVERSION:C/r/./}/:plugin \ ftp://ftp.ipt.ru/pub/download/:suplib \ LOCAL/nox:suplib PKGNAMEPREFIX= linux-f10- Index: distinfo =================================================================== RCS file: /base/FreeBSD-CVS/ports/www/linux-f10-flashplugin10/distinfo,v retrieving revision 1.21 diff -u -p -r1.21 distinfo --- distinfo 22 Sep 2011 20:47:10 -0000 1.21 +++ distinfo 11 Nov 2011 17:25:09 -0000 @@ -1,4 +1,4 @@ -SHA256 (flashplugin/10.3r183.10/install_flash_player_10_linux.tar.gz) = dfd5bbf4689465cc56b0a883b8368a1c13be6bdd0d594fc81a0129055e0b453a -SIZE (flashplugin/10.3r183.10/install_flash_player_10_linux.tar.gz) = 5459935 -SHA256 (flashplugin/10.3r183.10/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf -SIZE (flashplugin/10.3r183.10/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455 +SHA256 (flashplugin/10.3r183.11/install_flash_player_10_linux.tar.gz) = 57739e4333c2712409e0f47e0c681c2ae3eb495d1e9dc1d30fd8344c8e896d85 +SIZE (flashplugin/10.3r183.11/install_flash_player_10_linux.tar.gz) = 5460006 +SHA256 (flashplugin/10.3r183.11/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf +SIZE (flashplugin/10.3r183.11/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455 >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201111120720.pAC7Kclv008455>