Date: Fri, 27 Feb 2009 10:45:22 +0900 (JST) From: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp> To: FreeBSD-gnats-submit@FreeBSD.org Cc: turutani@scphys.kyoto-u.ac.jp Subject: ports/132148: www/linux-flashplugin9 is vulnerable Message-ID: <200902270145.n1R1jMOI061760@h120.65.226.10.32118.vlan.kuins.net> Resent-Message-ID: <200902270150.n1R1o3TS013633@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 132148 >Category: ports >Synopsis: www/linux-flashplugin9 is vulnerable >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Fri Feb 27 01:50:02 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Tsurutani Naoki >Release: FreeBSD 7.1-STABLE i386 >Organization: >Environment: System: FreeBSD h120.65.226.10.32118.vlan.kuins.net 7.1-STABLE FreeBSD 7.1-STABLE #17: Wed Jan 7 11:14:01 JST 2009 turutani@h120.65.226.10.32118.vlan.kuins.net:/usr/local/work/usr/obj/usr/src/sys/POLYMER i386 >Description: www/linux-flashplugin9 is vulnerable. ref: http://www.adobe.com/support/security/bulletins/apsb09-01.html >How-To-Repeat: >Fix: 9.0r159 is available from adobe. here is a patch to ports: diff -ur linux-flashplugin9.orig/Makefile linux-flashplugin9/Makefile --- linux-flashplugin9.orig/Makefile 2009-01-08 07:02:12.000000000 +0900 +++ linux-flashplugin9/Makefile 2009-02-26 01:18:15.000000000 +0900 @@ -6,7 +6,7 @@ # PORTNAME= flashplugin -PORTVERSION= 9.0r152 +PORTVERSION= 9.0r159 CATEGORIES= www multimedia linux MASTER_SITES= http://download.macromedia.com/pub/flashplayer/installers/current/9/:plugin \ http://tijl.ulyssis.be/mirror/:suplib diff -ur linux-flashplugin9.orig/distinfo linux-flashplugin9/distinfo --- linux-flashplugin9.orig/distinfo 2009-01-08 07:02:12.000000000 +0900 +++ linux-flashplugin9/distinfo 2009-02-26 01:20:50.000000000 +0900 @@ -1,6 +1,6 @@ -MD5 (flashplugin/9.0r152/install_flash_player_9.tar.gz) = 7cbd57d6582c754370dbb5e46b5b1809 -SHA256 (flashplugin/9.0r152/install_flash_player_9.tar.gz) = e4fcb13e79a28bc4866b986ac9c2a63e1acf7d709547a84fc2151b31cf43487b -SIZE (flashplugin/9.0r152/install_flash_player_9.tar.gz) = 3056503 -MD5 (flashplugin/9.0r152/libflashsupport.so) = c034ff03c92f94b2938062b6bbc02669 -SHA256 (flashplugin/9.0r152/libflashsupport.so) = d5c943e5a59016dcfeab5016d701e1e5e08fb30e8780d239053fec175b89d1e1 -SIZE (flashplugin/9.0r152/libflashsupport.so) = 44752 +MD5 (flashplugin/9.0r159/install_flash_player_9.tar.gz) = 10f06f6a7aac488f4ce6a06f18e3d107 +SHA256 (flashplugin/9.0r159/install_flash_player_9.tar.gz) = fe7a55f86faf663b36befa19848ddd28f808666d5cf7b14311599128c6d85fb7 +SIZE (flashplugin/9.0r159/install_flash_player_9.tar.gz) = 3057882 +MD5 (flashplugin/9.0r159/libflashsupport.so) = c034ff03c92f94b2938062b6bbc02669 +SHA256 (flashplugin/9.0r159/libflashsupport.so) = d5c943e5a59016dcfeab5016d701e1e5e08fb30e8780d239053fec175b89d1e1 +SIZE (flashplugin/9.0r159/libflashsupport.so) = 44752 >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200902270145.n1R1jMOI061760>