From nobody@FreeBSD.org  Sun Dec 21 08:54:43 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 433771065670
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 21 Dec 2008 08:54:43 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 31CAD8FC26
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 21 Dec 2008 08:54:43 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id mBL8sgOo098127
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 21 Dec 2008 08:54:42 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id mBL8sf6F098126;
	Sun, 21 Dec 2008 08:54:41 GMT
	(envelope-from nobody)
Message-Id: <200812210854.mBL8sf6F098126@www.freebsd.org>
Date: Sun, 21 Dec 2008 08:54:41 GMT
From: Thomas Zander <riggs@rrr.de>
To: freebsd-gnats-submit@FreeBSD.org
Subject: [Maintainer-update] multimedia/mplayer & multimedia/mencoder
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         129810
>Category:       ports
>Synopsis:       [Maintainer-update] multimedia/mplayer & multimedia/mencoder
>Confidential:   no
>Severity:       critical
>Priority:       low
>Responsible:    miwi
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Sun Dec 21 09:00:03 UTC 2008
>Closed-Date:    Tue Jan 06 18:57:45 UTC 2009
>Last-Modified:  Tue Jan  6 19:00:12 UTC 2009
>Originator:     Thomas Zander
>Release:        7.1-PRERELEASE
>Organization:
>Environment:
>Description:
This update fixes a vulnerability in mplayer's demuxer and a build problem that has been reported:
- Introduce files/patch-CVE-2008-5616
- Use additional configure arguments that fix a build problem in ports/128085 (this pr can be closed then)
- I hope a small change of configure arguments also fixes ports/128074 but this needs to be confirmed as I am not able to reproduce the mentioned problem
>How-To-Repeat:

>Fix:
The attached patch file contains a diff for both multimedia/mplayer and multimedia/mencoder.

Patch attached with submission follows:

diff -ruN /usr/ports/multimedia/mplayer/Makefile mplayer/Makefile
--- /usr/ports/multimedia/mplayer/Makefile	2008-10-13 10:08:43.000000000 +0800
+++ mplayer/Makefile	2008-12-21 06:56:41.000000000 +0900
@@ -7,7 +7,7 @@
 
 PORTNAME=	mplayer
 PORTVERSION=	${MPLAYER_PORT_VERSION}
-PORTREVISION=	8
+PORTREVISION=	9
 
 COMMENT=	High performance media player supporting many formats
 
@@ -77,6 +77,7 @@
 .include <bsd.port.pre.mk>
 
 CONFIGURE_ARGS+=	--disable-ssse3 \
+			--disable-directfb \
 			--disable-faac \
 			--disable-twolame \
 			--disable-mencoder
diff -ruN /usr/ports/multimedia/mplayer/Makefile.shared mplayer/Makefile.shared
--- /usr/ports/multimedia/mplayer/Makefile.shared	2008-08-28 09:53:19.000000000 +0800
+++ mplayer/Makefile.shared	2008-12-21 08:38:38.000000000 +0900
@@ -36,7 +36,7 @@
 		--disable-tv-v4l1 \
 		--disable-tv-v4l2 \
 		--disable-dvdnav \
-		--disable-dvdread
+		--enable-dvdread-internal
 
 WANT_GNOME=	yes
 WANT_SDL=	yes
diff -ruN /usr/ports/multimedia/mplayer/files/patch-CVE-2008-5616 mplayer/files/patch-CVE-2008-5616
--- /usr/ports/multimedia/mplayer/files/patch-CVE-2008-5616	1970-01-01 08:00:00.000000000 +0800
+++ mplayer/files/patch-CVE-2008-5616	2008-12-21 06:55:18.000000000 +0900
@@ -0,0 +1,55 @@
+--- libmpdemux/demux_vqf.c.orig	2007-10-07 20:49:33.000000000 +0100
++++ libmpdemux/demux_vqf.c	2008-12-15 14:29:58.000000000 +0000
+@@ -50,11 +50,14 @@
+     unsigned chunk_size;
+     hi->size=chunk_size=stream_read_dword(s); /* include itself */
+     stream_read(s,chunk_id,4);
++    if (chunk_size < 8) return NULL;
++    chunk_size -= 8;
+     if(*((uint32_t *)&chunk_id[0])==mmioFOURCC('C','O','M','M'))
+     {
+-    char buf[chunk_size-8];
++    char buf[BUFSIZ];
+     unsigned i,subchunk_size;
+-    if(stream_read(s,buf,chunk_size-8)!=chunk_size-8) return NULL;
++    if (chunk_size > sizeof(buf) || chunk_size < 20) return NULL;
++    if(stream_read(s,buf,chunk_size)!=chunk_size) return NULL;
+     i=0;
+     subchunk_size=be2me_32(*((uint32_t *)&buf[0]));
+     hi->channelMode=be2me_32(*((uint32_t *)&buf[4]));
+@@ -83,13 +86,15 @@
+     sh_audio->samplesize = 4;
+     w->wBitsPerSample = 8*sh_audio->samplesize;
+     w->cbSize = 0;
++    if (subchunk_size > chunk_size - 4) continue;
+     i+=subchunk_size+4;
+-    while(i<chunk_size-8)
++    while(i + 8 < chunk_size)
+     {
+         unsigned slen,sid;
+-        char sdata[chunk_size];
++        char sdata[BUFSIZ];
+         sid=*((uint32_t *)&buf[i]); i+=4;
+         slen=be2me_32(*((uint32_t *)&buf[i])); i+=4;
++        if (slen > sizeof(sdata) - 1 || slen > chunk_size - i) break;
+         if(sid==mmioFOURCC('D','S','I','Z'))
+         {
+         hi->Dsiz=be2me_32(*((uint32_t *)&buf[i]));
+@@ -141,7 +146,7 @@
+     if(*((uint32_t *)&chunk_id[0])==mmioFOURCC('D','A','T','A'))
+     {
+     demuxer->movi_start=stream_tell(s);
+-    demuxer->movi_end=demuxer->movi_start+chunk_size-8;
++    demuxer->movi_end=demuxer->movi_start+chunk_size;
+     mp_msg(MSGT_DEMUX, MSGL_V, "Found data at %"PRIX64" size %"PRIu64"\n",demuxer->movi_start,demuxer->movi_end);
+     /* Done! play it */
+     break;
+@@ -149,7 +154,7 @@
+     else
+     {
+     mp_msg(MSGT_DEMUX, MSGL_V, "Unhandled chunk '%c%c%c%c' %u bytes\n",((char *)&chunk_id)[0],((char *)&chunk_id)[1],((char *)&chunk_id)[2],((char *)&chunk_id)[3],chunk_size);
+-    stream_skip(s,chunk_size-8); /*unknown chunk type */
++    stream_skip(s,chunk_size); /*unknown chunk type */
+     }
+   }
+ 
diff -ruN /usr/ports/multimedia/mencoder/Makefile mencoder/Makefile
--- /usr/ports/multimedia/mencoder/Makefile	2008-08-28 09:53:19.000000000 +0800
+++ mencoder/Makefile	2008-12-21 06:57:38.000000000 +0900
@@ -6,7 +6,7 @@
 
 PORTNAME=	mencoder
 PORTVERSION=	${MPLAYER_PORT_VERSION}
-PORTREVISION=	2
+PORTREVISION=	3
 COMMENT=	Convenient video file and movie encoder
 RESTRICTED=	Port has restricted dependencies
 
@@ -78,6 +78,7 @@
 			--disable-svga \
 			--disable-aa \
 			--disable-joystick \
+			--disable-directfb \
 			--disable-ssse3
 
 .include "${.CURDIR}/../mplayer/Makefile.options"


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->miwi 
Responsible-Changed-By: miwi 
Responsible-Changed-When: Sun Dec 21 10:55:06 UTC 2008 
Responsible-Changed-Why:  
I'll take it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=129810 
State-Changed-From-To: open->feedback 
State-Changed-By: miwi 
State-Changed-When: Tue Dec 30 10:53:58 UTC 2008 
State-Changed-Why:  

Hi Thomas, 

Looks like your patch are broke the build, could you please take a look? 

http://i386.miwibox.org/index.php?action=describe_port&id=705 
http://amd64.miwibox.org/index.php?action=describe_port&id=731 

Thanks Martin 


http://www.freebsd.org/cgi/query-pr.cgi?pr=129810 

From: "Thomas Zander" <thomas.e.zander@googlemail.com>
To: miwi@freebsd.org
Cc: bug-followup@freebsd.org
Subject: Re: ports/129810: [Maintainer-update] multimedia/mplayer & multimedia/mencoder
Date: Thu, 1 Jan 2009 17:49:48 +0800

 ------=_Part_213178_19691560.1230803388842
 Content-Type: text/plain; charset=ISO-8859-1
 Content-Transfer-Encoding: 7bit
 Content-Disposition: inline
 
 On Tue, Dec 30, 2008 at 18:55,  <miwi@freebsd.org> wrote:
 
 > Looks like your patch are broke the build, could you please take a look?
 
 Indeed, I was able to reproduce your build problem.
 Can you try the attached diff instead?
 
 Merci,
 Riggs
 
 ------=_Part_213178_19691560.1230803388842
 Content-Type: text/plain; name=m.txt
 Content-Transfer-Encoding: base64
 X-Attachment-Id: f_fpf8iezv0
 Content-Disposition: attachment; filename=m.txt
 
 ZGlmZiAtcnVOIC91c3IvcG9ydHMvbXVsdGltZWRpYS9tcGxheWVyL01ha2VmaWxlIG1wbGF5ZXIv
 TWFrZWZpbGUKLS0tIC91c3IvcG9ydHMvbXVsdGltZWRpYS9tcGxheWVyL01ha2VmaWxlCTIwMDgt
 MTItMjggMTA6MDQ6NTUuMDAwMDAwMDAwICswODAwCisrKyBtcGxheWVyL01ha2VmaWxlCTIwMDkt
 MDEtMDEgMTM6NTQ6NTcuMDAwMDAwMDAwICswODAwCkBAIC03LDcgKzcsNyBAQAogCiBQT1JUTkFN
 RT0JbXBsYXllcgogUE9SVFZFUlNJT049CSR7TVBMQVlFUl9QT1JUX1ZFUlNJT059Ci1QT1JUUkVW
 SVNJT049CTgKK1BPUlRSRVZJU0lPTj0JOQogCiBDT01NRU5UPQlIaWdoIHBlcmZvcm1hbmNlIG1l
 ZGlhIHBsYXllciBzdXBwb3J0aW5nIG1hbnkgZm9ybWF0cwogCkBAIC03Nyw2ICs3Nyw3IEBACiAu
 aW5jbHVkZSA8YnNkLnBvcnQucHJlLm1rPgogCiBDT05GSUdVUkVfQVJHUys9CS0tZGlzYWJsZS1z
 c3NlMyBcCisJCQktLWRpc2FibGUtZGlyZWN0ZmIgXAogCQkJLS1kaXNhYmxlLWZhYWMgXAogCQkJ
 LS1kaXNhYmxlLXR3b2xhbWUgXAogCQkJLS1kaXNhYmxlLW1lbmNvZGVyCmRpZmYgLXJ1TiAvdXNy
 L3BvcnRzL211bHRpbWVkaWEvbXBsYXllci9NYWtlZmlsZS5zaGFyZWQgbXBsYXllci9NYWtlZmls
 ZS5zaGFyZWQKLS0tIC91c3IvcG9ydHMvbXVsdGltZWRpYS9tcGxheWVyL01ha2VmaWxlLnNoYXJl
 ZAkyMDA4LTAyLTAyIDEzOjM5OjIxLjAwMDAwMDAwMCArMDgwMAorKysgbXBsYXllci9NYWtlZmls
 ZS5zaGFyZWQJMjAwOS0wMS0wMSAxNDoyMToyNS4wMDAwMDAwMDAgKzA4MDAKQEAgLTM1LDggKzM1
 LDcgQEAKIAkJLS1kaXNhYmxlLXZpZGl4LWV4dGVybmFsIFwKIAkJLS1kaXNhYmxlLXR2LXY0bDEg
 XAogCQktLWRpc2FibGUtdHYtdjRsMiBcCi0JCS0tZGlzYWJsZS1kdmRuYXYgXAotCQktLWRpc2Fi
 bGUtZHZkcmVhZAorCQktLWRpc2FibGUtZHZkbmF2CiAKIFdBTlRfR05PTUU9CXllcwogV0FOVF9T
 REw9CXllcwpkaWZmIC1ydU4gL3Vzci9wb3J0cy9tdWx0aW1lZGlhL21wbGF5ZXIvZmlsZXMvcGF0
 Y2gtQ1ZFLTIwMDgtNTYxNiBtcGxheWVyL2ZpbGVzL3BhdGNoLUNWRS0yMDA4LTU2MTYKLS0tIC91
 c3IvcG9ydHMvbXVsdGltZWRpYS9tcGxheWVyL2ZpbGVzL3BhdGNoLUNWRS0yMDA4LTU2MTYJMTk3
 MC0wMS0wMSAwODowMDowMC4wMDAwMDAwMDAgKzA4MDAKKysrIG1wbGF5ZXIvZmlsZXMvcGF0Y2gt
 Q1ZFLTIwMDgtNTYxNgkyMDA5LTAxLTAxIDEzOjU0OjU3LjAwMDAwMDAwMCArMDgwMApAQCAtMCww
 ICsxLDU1IEBACistLS0gbGlibXBkZW11eC9kZW11eF92cWYuYy5vcmlnCTIwMDctMTAtMDcgMjA6
 NDk6MzMuMDAwMDAwMDAwICswMTAwCisrKysgbGlibXBkZW11eC9kZW11eF92cWYuYwkyMDA4LTEy
 LTE1IDE0OjI5OjU4LjAwMDAwMDAwMCArMDAwMAorQEAgLTUwLDExICs1MCwxNCBAQAorICAgICB1
 bnNpZ25lZCBjaHVua19zaXplOworICAgICBoaS0+c2l6ZT1jaHVua19zaXplPXN0cmVhbV9yZWFk
 X2R3b3JkKHMpOyAvKiBpbmNsdWRlIGl0c2VsZiAqLworICAgICBzdHJlYW1fcmVhZChzLGNodW5r
 X2lkLDQpOworKyAgICBpZiAoY2h1bmtfc2l6ZSA8IDgpIHJldHVybiBOVUxMOworKyAgICBjaHVu
 a19zaXplIC09IDg7CisgICAgIGlmKCooKHVpbnQzMl90ICopJmNodW5rX2lkWzBdKT09bW1pb0ZP
 VVJDQygnQycsJ08nLCdNJywnTScpKQorICAgICB7CistICAgIGNoYXIgYnVmW2NodW5rX3NpemUt
 OF07CisrICAgIGNoYXIgYnVmW0JVRlNJWl07CisgICAgIHVuc2lnbmVkIGksc3ViY2h1bmtfc2l6
 ZTsKKy0gICAgaWYoc3RyZWFtX3JlYWQocyxidWYsY2h1bmtfc2l6ZS04KSE9Y2h1bmtfc2l6ZS04
 KSByZXR1cm4gTlVMTDsKKysgICAgaWYgKGNodW5rX3NpemUgPiBzaXplb2YoYnVmKSB8fCBjaHVu
 a19zaXplIDwgMjApIHJldHVybiBOVUxMOworKyAgICBpZihzdHJlYW1fcmVhZChzLGJ1ZixjaHVu
 a19zaXplKSE9Y2h1bmtfc2l6ZSkgcmV0dXJuIE5VTEw7CisgICAgIGk9MDsKKyAgICAgc3ViY2h1
 bmtfc2l6ZT1iZTJtZV8zMigqKCh1aW50MzJfdCAqKSZidWZbMF0pKTsKKyAgICAgaGktPmNoYW5u
 ZWxNb2RlPWJlMm1lXzMyKCooKHVpbnQzMl90ICopJmJ1Zls0XSkpOworQEAgLTgzLDEzICs4Niwx
 NSBAQAorICAgICBzaF9hdWRpby0+c2FtcGxlc2l6ZSA9IDQ7CisgICAgIHctPndCaXRzUGVyU2Ft
 cGxlID0gOCpzaF9hdWRpby0+c2FtcGxlc2l6ZTsKKyAgICAgdy0+Y2JTaXplID0gMDsKKysgICAg
 aWYgKHN1YmNodW5rX3NpemUgPiBjaHVua19zaXplIC0gNCkgY29udGludWU7CisgICAgIGkrPXN1
 YmNodW5rX3NpemUrNDsKKy0gICAgd2hpbGUoaTxjaHVua19zaXplLTgpCisrICAgIHdoaWxlKGkg
 KyA4IDwgY2h1bmtfc2l6ZSkKKyAgICAgeworICAgICAgICAgdW5zaWduZWQgc2xlbixzaWQ7Cist
 ICAgICAgICBjaGFyIHNkYXRhW2NodW5rX3NpemVdOworKyAgICAgICAgY2hhciBzZGF0YVtCVUZT
 SVpdOworICAgICAgICAgc2lkPSooKHVpbnQzMl90ICopJmJ1ZltpXSk7IGkrPTQ7CisgICAgICAg
 ICBzbGVuPWJlMm1lXzMyKCooKHVpbnQzMl90ICopJmJ1ZltpXSkpOyBpKz00OworKyAgICAgICAg
 aWYgKHNsZW4gPiBzaXplb2Yoc2RhdGEpIC0gMSB8fCBzbGVuID4gY2h1bmtfc2l6ZSAtIGkpIGJy
 ZWFrOworICAgICAgICAgaWYoc2lkPT1tbWlvRk9VUkNDKCdEJywnUycsJ0knLCdaJykpCisgICAg
 ICAgICB7CisgICAgICAgICBoaS0+RHNpej1iZTJtZV8zMigqKCh1aW50MzJfdCAqKSZidWZbaV0p
 KTsKK0BAIC0xNDEsNyArMTQ2LDcgQEAKKyAgICAgaWYoKigodWludDMyX3QgKikmY2h1bmtfaWRb
 MF0pPT1tbWlvRk9VUkNDKCdEJywnQScsJ1QnLCdBJykpCisgICAgIHsKKyAgICAgZGVtdXhlci0+
 bW92aV9zdGFydD1zdHJlYW1fdGVsbChzKTsKKy0gICAgZGVtdXhlci0+bW92aV9lbmQ9ZGVtdXhl
 ci0+bW92aV9zdGFydCtjaHVua19zaXplLTg7CisrICAgIGRlbXV4ZXItPm1vdmlfZW5kPWRlbXV4
 ZXItPm1vdmlfc3RhcnQrY2h1bmtfc2l6ZTsKKyAgICAgbXBfbXNnKE1TR1RfREVNVVgsIE1TR0xf
 ViwgIkZvdW5kIGRhdGEgYXQgJSJQUklYNjQiIHNpemUgJSJQUkl1NjQiXG4iLGRlbXV4ZXItPm1v
 dmlfc3RhcnQsZGVtdXhlci0+bW92aV9lbmQpOworICAgICAvKiBEb25lISBwbGF5IGl0ICovCisg
 ICAgIGJyZWFrOworQEAgLTE0OSw3ICsxNTQsNyBAQAorICAgICBlbHNlCisgICAgIHsKKyAgICAg
 bXBfbXNnKE1TR1RfREVNVVgsIE1TR0xfViwgIlVuaGFuZGxlZCBjaHVuayAnJWMlYyVjJWMnICV1
 IGJ5dGVzXG4iLCgoY2hhciAqKSZjaHVua19pZClbMF0sKChjaGFyICopJmNodW5rX2lkKVsxXSwo
 KGNoYXIgKikmY2h1bmtfaWQpWzJdLCgoY2hhciAqKSZjaHVua19pZClbM10sY2h1bmtfc2l6ZSk7
 CistICAgIHN0cmVhbV9za2lwKHMsY2h1bmtfc2l6ZS04KTsgLyp1bmtub3duIGNodW5rIHR5cGUg
 Ki8KKysgICAgc3RyZWFtX3NraXAocyxjaHVua19zaXplKTsgLyp1bmtub3duIGNodW5rIHR5cGUg
 Ki8KKyAgICAgfQorICAgfQorIApkaWZmIC1ydU4gL3Vzci9wb3J0cy9tdWx0aW1lZGlhL21lbmNv
 ZGVyL01ha2VmaWxlIG1lbmNvZGVyL01ha2VmaWxlCi0tLSAvdXNyL3BvcnRzL211bHRpbWVkaWEv
 bWVuY29kZXIvTWFrZWZpbGUJMjAwOC0wNi0wOCAxODozMjo1OS4wMDAwMDAwMDAgKzA4MDAKKysr
 IG1lbmNvZGVyL01ha2VmaWxlCTIwMDktMDEtMDEgMTM6NTQ6NTcuMDAwMDAwMDAwICswODAwCkBA
 IC02LDcgKzYsNyBAQAogCiBQT1JUTkFNRT0JbWVuY29kZXIKIFBPUlRWRVJTSU9OPQkke01QTEFZ
 RVJfUE9SVF9WRVJTSU9OfQotUE9SVFJFVklTSU9OPQkyCitQT1JUUkVWSVNJT049CTMKIENPTU1F
 TlQ9CUNvbnZlbmllbnQgdmlkZW8gZmlsZSBhbmQgbW92aWUgZW5jb2RlcgogUkVTVFJJQ1RFRD0J
 UG9ydCBoYXMgcmVzdHJpY3RlZCBkZXBlbmRlbmNpZXMKIApAQCAtNzgsNiArNzgsNyBAQAogCQkJ
 LS1kaXNhYmxlLXN2Z2EgXAogCQkJLS1kaXNhYmxlLWFhIFwKIAkJCS0tZGlzYWJsZS1qb3lzdGlj
 ayBcCisJCQktLWRpc2FibGUtZGlyZWN0ZmIgXAogCQkJLS1kaXNhYmxlLXNzc2UzCiAKIC5pbmNs
 dWRlICIkey5DVVJESVJ9Ly4uL21wbGF5ZXIvTWFrZWZpbGUub3B0aW9ucyIK
 ------=_Part_213178_19691560.1230803388842--
State-Changed-From-To: feedback->closed 
State-Changed-By: miwi 
State-Changed-When: Tue Jan 6 18:57:44 UTC 2009 
State-Changed-Why:  
Committed. Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=129810 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/129810: commit references a PR
Date: Tue,  6 Jan 2009 18:57:42 +0000 (UTC)

 miwi        2009-01-06 18:57:27 UTC
 
   FreeBSD ports repository
 
   Modified files:
     multimedia/mencoder  Makefile 
     multimedia/mplayer   Makefile Makefile.shared 
   Added files:
     multimedia/mplayer/files patch-CVE-2008-5616 
   Log:
   - Use additional configure arguments that fix a build problem in ports/128085
   - Small change of configure arguments also fixes ports/128074
   - Fix a stack buffer overflow vulnerability while parsing malformed TwinVQ
     media files.
   - Bump PORTREVISION
   
   PR:             129810
   Submitted by:   Thomas Zander <riggs@rrr.de> (maintainer)
   Security:       http://www.vuxml.org/freebsd/7c5bd5b8-d652-11dd-a765-0030843d3802.html
   
   Revision  Changes    Path
   1.7       +2 -1      ports/multimedia/mencoder/Makefile
   1.180     +1 -0      ports/multimedia/mplayer/Makefile
   1.4       +1 -2      ports/multimedia/mplayer/Makefile.shared
   1.1       +55 -0     ports/multimedia/mplayer/files/patch-CVE-2008-5616 (new)
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
>Unformatted:
