From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Feb 27 01:50:03 2009 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 81C3E106566B for ; Fri, 27 Feb 2009 01:50:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 52B968FC25 for ; Fri, 27 Feb 2009 01:50:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n1R1o3vf013635 for ; Fri, 27 Feb 2009 01:50:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n1R1o3TS013633; Fri, 27 Feb 2009 01:50:03 GMT (envelope-from gnats) Resent-Date: Fri, 27 Feb 2009 01:50:03 GMT Resent-Message-Id: <200902270150.n1R1o3TS013633@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Tsurutani Naoki Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 31376106564A for ; Fri, 27 Feb 2009 01:45:31 +0000 (UTC) (envelope-from turutani@scphys.kyoto-u.ac.jp) Received: from m103.mbos.jp (mbos141-203.alpenstock.jp [220.156.141.203]) by mx1.freebsd.org (Postfix) with ESMTP id BD9978FC0A for ; Fri, 27 Feb 2009 01:45:30 +0000 (UTC) (envelope-from turutani@scphys.kyoto-u.ac.jp) Received: (qmail 4379 invoked from network); 27 Feb 2009 10:45:29 +0900 Received: from softbank218183189199.bbtec.net (HELO h120.65.226.10.32118.vlan.kuins.net) (turutani@mbox.kyoto-inet.or.jp@[218.183.189.199]) (envelope-sender ) by soul.mbos (qmail-ldap-1.03) with SMTP for ; 27 Feb 2009 10:45:29 +0900 Received: from h120.65.226.10.32118.vlan.kuins.net (localhost [127.0.0.1]) by h120.65.226.10.32118.vlan.kuins.net (8.14.3/8.14.3/20071004-1) with ESMTP id n1R1jMhQ061761; Fri, 27 Feb 2009 10:45:22 +0900 (JST) (envelope-from turutani@h120.65.226.10.32118.vlan.kuins.net) Received: (from turutani@localhost) by h120.65.226.10.32118.vlan.kuins.net (8.14.3/8.14.3/Submit) id n1R1jMOI061760; Fri, 27 Feb 2009 10:45:22 +0900 (JST) (envelope-from turutani) Message-Id: <200902270145.n1R1jMOI061760@h120.65.226.10.32118.vlan.kuins.net> Date: Fri, 27 Feb 2009 10:45:22 +0900 (JST) From: Tsurutani Naoki To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: turutani@scphys.kyoto-u.ac.jp Subject: ports/132148: www/linux-flashplugin9 is vulnerable X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Tsurutani Naoki List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Feb 2009 01:50:03 -0000 >Number: 132148 >Category: ports >Synopsis: www/linux-flashplugin9 is vulnerable >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Fri Feb 27 01:50:02 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Tsurutani Naoki >Release: FreeBSD 7.1-STABLE i386 >Organization: >Environment: System: FreeBSD h120.65.226.10.32118.vlan.kuins.net 7.1-STABLE FreeBSD 7.1-STABLE #17: Wed Jan 7 11:14:01 JST 2009 turutani@h120.65.226.10.32118.vlan.kuins.net:/usr/local/work/usr/obj/usr/src/sys/POLYMER i386 >Description: www/linux-flashplugin9 is vulnerable. ref: http://www.adobe.com/support/security/bulletins/apsb09-01.html >How-To-Repeat: >Fix: 9.0r159 is available from adobe. here is a patch to ports: diff -ur linux-flashplugin9.orig/Makefile linux-flashplugin9/Makefile --- linux-flashplugin9.orig/Makefile 2009-01-08 07:02:12.000000000 +0900 +++ linux-flashplugin9/Makefile 2009-02-26 01:18:15.000000000 +0900 @@ -6,7 +6,7 @@ # PORTNAME= flashplugin -PORTVERSION= 9.0r152 +PORTVERSION= 9.0r159 CATEGORIES= www multimedia linux MASTER_SITES= http://download.macromedia.com/pub/flashplayer/installers/current/9/:plugin \ http://tijl.ulyssis.be/mirror/:suplib diff -ur linux-flashplugin9.orig/distinfo linux-flashplugin9/distinfo --- linux-flashplugin9.orig/distinfo 2009-01-08 07:02:12.000000000 +0900 +++ linux-flashplugin9/distinfo 2009-02-26 01:20:50.000000000 +0900 @@ -1,6 +1,6 @@ -MD5 (flashplugin/9.0r152/install_flash_player_9.tar.gz) = 7cbd57d6582c754370dbb5e46b5b1809 -SHA256 (flashplugin/9.0r152/install_flash_player_9.tar.gz) = e4fcb13e79a28bc4866b986ac9c2a63e1acf7d709547a84fc2151b31cf43487b -SIZE (flashplugin/9.0r152/install_flash_player_9.tar.gz) = 3056503 -MD5 (flashplugin/9.0r152/libflashsupport.so) = c034ff03c92f94b2938062b6bbc02669 -SHA256 (flashplugin/9.0r152/libflashsupport.so) = d5c943e5a59016dcfeab5016d701e1e5e08fb30e8780d239053fec175b89d1e1 -SIZE (flashplugin/9.0r152/libflashsupport.so) = 44752 +MD5 (flashplugin/9.0r159/install_flash_player_9.tar.gz) = 10f06f6a7aac488f4ce6a06f18e3d107 +SHA256 (flashplugin/9.0r159/install_flash_player_9.tar.gz) = fe7a55f86faf663b36befa19848ddd28f808666d5cf7b14311599128c6d85fb7 +SIZE (flashplugin/9.0r159/install_flash_player_9.tar.gz) = 3057882 +MD5 (flashplugin/9.0r159/libflashsupport.so) = c034ff03c92f94b2938062b6bbc02669 +SHA256 (flashplugin/9.0r159/libflashsupport.so) = d5c943e5a59016dcfeab5016d701e1e5e08fb30e8780d239053fec175b89d1e1 +SIZE (flashplugin/9.0r159/libflashsupport.so) = 44752 >Release-Note: >Audit-Trail: >Unformatted: