From owner-cvs-all@FreeBSD.ORG Wed Nov 12 16:31:28 2008 Return-Path: Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5FA321065676; Wed, 12 Nov 2008 16:31:28 +0000 (UTC) (envelope-from pav@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 5861A8FC08; Wed, 12 Nov 2008 16:31:28 +0000 (UTC) (envelope-from pav@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id mACGVSLU045675; Wed, 12 Nov 2008 16:31:28 GMT (envelope-from pav@repoman.freebsd.org) Received: (from pav@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id mACGVSxU045674; Wed, 12 Nov 2008 16:31:28 GMT (envelope-from pav) Message-Id: <200811121631.mACGVSxU045674@repoman.freebsd.org> From: Pav Lucistnik Date: Wed, 12 Nov 2008 16:31:27 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/audio/faad Makefile ports/audio/faad/files patch-frontend_main.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Nov 2008 16:31:28 -0000 pav 2008-11-12 16:31:27 UTC FreeBSD ports repository Modified files: audio/faad Makefile Added files: audio/faad/files patch-frontend_main.c Log: - Fix a heap-based buffer overflow in the command-line frontend. It allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MPEG-4 (MP4) file. PR: ports/128512 Submitted by: bf Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4201 Revision Changes Path 1.51 +1 -0 ports/audio/faad/Makefile 1.1 +17 -0 ports/audio/faad/files/patch-frontend_main.c (new)