ports/162498: www/linux-f10-flashplugin10 is vulnerable
John Hein
jhein at symmetricom.com
Sat Nov 12 07:30:11 UTC 2011
>Number: 162498
>Category: ports
>Synopsis: www/linux-f10-flashplugin10 is vulnerable
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Sat Nov 12 07:30:09 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator: John Hein
>Release:
>Organization:
>Environment:
System:
>Description:
See http://www.adobe.com/support/security/bulletins/apsb11-28.html
Also the download url has changed slightly, so the 10.3.r183.10
port also doesn't fetch now.
While the 10.x flashplugin is still supported, this port should
be updated along with 11.x (ports/162476).
>How-To-Repeat:
>Fix:
Index: Makefile
===================================================================
RCS file: /base/FreeBSD-CVS/ports/www/linux-f10-flashplugin10/Makefile,v
retrieving revision 1.27
diff -u -p -r1.27 Makefile
--- Makefile 31 Oct 2011 21:16:53 -0000 1.27
+++ Makefile 12 Nov 2011 06:21:12 -0000
@@ -7,9 +7,9 @@
#
PORTNAME= flashplugin
-PORTVERSION= 10.3r183.10
+PORTVERSION= 10.3r183.11
CATEGORIES= www multimedia linux
-MASTER_SITES= http://fpdownload.macromedia.com/get/flashplayer/current/:plugin \
+MASTER_SITES= http://fpdownload.macromedia.com/get/flashplayer/pdc/${PORTVERSION:C/r/./}/:plugin \
ftp://ftp.ipt.ru/pub/download/:suplib \
LOCAL/nox:suplib
PKGNAMEPREFIX= linux-f10-
Index: distinfo
===================================================================
RCS file: /base/FreeBSD-CVS/ports/www/linux-f10-flashplugin10/distinfo,v
retrieving revision 1.21
diff -u -p -r1.21 distinfo
--- distinfo 22 Sep 2011 20:47:10 -0000 1.21
+++ distinfo 11 Nov 2011 17:25:09 -0000
@@ -1,4 +1,4 @@
-SHA256 (flashplugin/10.3r183.10/install_flash_player_10_linux.tar.gz) = dfd5bbf4689465cc56b0a883b8368a1c13be6bdd0d594fc81a0129055e0b453a
-SIZE (flashplugin/10.3r183.10/install_flash_player_10_linux.tar.gz) = 5459935
-SHA256 (flashplugin/10.3r183.10/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf
-SIZE (flashplugin/10.3r183.10/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455
+SHA256 (flashplugin/10.3r183.11/install_flash_player_10_linux.tar.gz) = 57739e4333c2712409e0f47e0c681c2ae3eb495d1e9dc1d30fd8344c8e896d85
+SIZE (flashplugin/10.3r183.11/install_flash_player_10_linux.tar.gz) = 5460006
+SHA256 (flashplugin/10.3r183.11/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf
+SIZE (flashplugin/10.3r183.11/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list