CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]   2009/02/02 15:00:42

Modified files:
        multimedia/xine-lib: Makefile distinfo 
        multimedia/xine-lib/patches: patch-configure_ac 
                                     patch-src_audio_out_Makefile_in 
                                     patch-src_demuxers_demux_mpeg_pes_c 
                                     patch-src_demuxers_demux_qt_c 
                                     patch-src_input_Makefile_in 
                                     patch-src_input_input_cdda_c 
                                     patch-src_input_input_dvd_c 
                                     patch-src_input_input_file_c 
                                     patch-src_input_input_http_c 
                                     patch-src_input_input_net_c 
                                     patch-src_input_input_stdin_fifo_c 
                                     patch-src_input_mms_c 
                                     patch-src_libw32dll_wine_Makefile_in 
                                     patch-src_post_deinterlace_Makefile_in 
                                     
patch-src_post_deinterlace_plugins_Makefile_in 
                                     patch-src_xine-engine_Makefile_in 
Added files:
        multimedia/xine-lib/patches: patch-m4_attributes_m4 
        multimedia/xine-lib/pkg: DESCR PFRAG.i386 PLIST 
Removed files:
        multimedia/xine-lib/patches: patch-src_audio_out_audio_sun_out_c 
                                     patch-src_demuxers_demux_flv_c 
                                     patch-src_xine-engine_buffer_h 
        multimedia/xine-lib/pkg: DESCR-jack DESCR-main PFRAG.i386-main 
                                 PLIST-jack PLIST-main 

Log message:
- SECURITY update to Xine-lib 1.1.16.1
- Heap overflow in Quicktime atom parsing.  (CVE-2008-5234 vector 1)
- Multiple buffer overflows.                (CVE-2008-5236)
- Multiple integer overflows.               (CVE-2008-5237)
- Unchecked read function results.          (CVE-2008-5239)
- Unchecked malloc using untrusted values.  (CVE-2008-5240 vectors 3 & 4)
- Buffer indexing using an untrusted value. (CVE-2008-5243)
- Clean up the Makefile
- Enable the Xv motion compensation support
- Remove the JACK sound support
- Remove the now unnecessary multi-packaging
- Remove an unnecessary patch for the Sun sound code
- Comment out some files in the PLIST that do not pertain to OpenBSD
- Add WavPack support

from Brad (taking MAINTAINER).

Reply via email to