aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJuergen Lock <nox@FreeBSD.org>2011-04-17 18:32:15 +0000
committerJuergen Lock <nox@FreeBSD.org>2011-04-17 18:32:15 +0000
commit3033099e9af91c007c6d708d81eb39bc4a25cd20 (patch)
tree6c10e96bf57a393df9f66e752f08b943e472bea0
parentcc98b3cea733741442859ad45c80b8619f2002f6 (diff)
Notes
-rw-r--r--security/vuxml/vuln.xml48
-rw-r--r--www/linux-f10-flashplugin10/Makefile2
-rw-r--r--www/linux-f10-flashplugin10/distinfo8
-rw-r--r--www/linux-f10-flashplugin11/Makefile2
-rw-r--r--www/linux-f10-flashplugin11/distinfo8
5 files changed, 58 insertions, 10 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index ba34c1ad550c..c35cbd5be775 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -34,6 +34,54 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="32b05547-6913-11e0-bdc4-001b2134ef46">
+ <topic>linux-flashplugin -- remote code execution vulnerability</topic>
+ <affects>
+ <package>
+ <name>linux-flashplugin</name>
+ <range><le>9.0r289</le></range>
+ </package>
+ <package>
+ <name>linux-f10-flashplugin</name>
+ <range><lt>10.2r159.1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Adobe Product Security Incident Response Team reports:</p>
+ <blockquote cite="http://www.adobe.com/support/security/advisories/apsa11-02.html">
+ <p>A critical vulnerability exists in Flash Player 10.2.153.1
+ and earlier versions (Adobe Flash Player 10.2.154.25 and
+ earlier for Chrome users) for Windows, Macintosh, Linux
+ and Solaris, Adobe Flash Player 10.2.156.12 and earlier
+ versions for Android, and the Authplay.dll component that
+ ships with Adobe Reader and Acrobat X (10.0.2) and earlier
+ 10.x and 9.x versions for Windows and Macintosh operating
+ systems.</p>
+ <p>This vulnerability (CVE-2011-0611) could cause a crash
+ and potentially allow an attacker to take control of the
+ affected system. There are reports that this vulnerability
+ is being exploited in the wild in targeted attacks via a
+ malicious Web page or a Flash (.swf) file embedded in a
+ Microsoft Word (.doc) or Microsoft Excel (.xls) file
+ delivered as an email attachment, targeting the Windows
+ platform. At this time, Adobe is not aware of any attacks
+ via PDF targeting Adobe Reader and Acrobat. Adobe Reader
+ X Protected Mode mitigations would prevent an exploit of
+ this kind from executing.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2011-0611</cvename>
+ <url>http://www.adobe.com/support/security/advisories/apsa11-02.html</url>
+ </references>
+ <dates>
+ <discovery>2011-01-20</discovery>
+ <entry>2011-04-17</entry>
+ </dates>
+ </vuln>
+
<vuln vid="bf171509-68dd-11e0-afe6-0003ba02bf30">
<topic>rt -- multiple vulnerabilities </topic>
<affects>
diff --git a/www/linux-f10-flashplugin10/Makefile b/www/linux-f10-flashplugin10/Makefile
index ee14dfdf81de..9c8d8a553cfc 100644
--- a/www/linux-f10-flashplugin10/Makefile
+++ b/www/linux-f10-flashplugin10/Makefile
@@ -7,7 +7,7 @@
#
PORTNAME= flashplugin
-PORTVERSION= 10.2r153
+PORTVERSION= 10.2r159.1
CATEGORIES= www multimedia linux
MASTER_SITES= http://fpdownload.macromedia.com/get/flashplayer/current/:plugin \
ftp://ftp.ipt.ru/pub/download/:suplib
diff --git a/www/linux-f10-flashplugin10/distinfo b/www/linux-f10-flashplugin10/distinfo
index 92ec62c3e71b..a93000320ab5 100644
--- a/www/linux-f10-flashplugin10/distinfo
+++ b/www/linux-f10-flashplugin10/distinfo
@@ -1,4 +1,4 @@
-SHA256 (flashplugin/10.2r153/install_flash_player_10_linux.tar.gz) = 57889f6cf023927fbf50ca4d7496c0e2aa1eabad76120a18c8e4b7be57e9aaf9
-SIZE (flashplugin/10.2r153/install_flash_player_10_linux.tar.gz) = 4967805
-SHA256 (flashplugin/10.2r153/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf
-SIZE (flashplugin/10.2r153/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455
+SHA256 (flashplugin/10.2r159.1/install_flash_player_10_linux.tar.gz) = e6844572fad1cef47dfa8afea6a6cf1e1191fde30041947d5beab1445e0ed742
+SIZE (flashplugin/10.2r159.1/install_flash_player_10_linux.tar.gz) = 4967668
+SHA256 (flashplugin/10.2r159.1/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf
+SIZE (flashplugin/10.2r159.1/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455
diff --git a/www/linux-f10-flashplugin11/Makefile b/www/linux-f10-flashplugin11/Makefile
index ee14dfdf81de..9c8d8a553cfc 100644
--- a/www/linux-f10-flashplugin11/Makefile
+++ b/www/linux-f10-flashplugin11/Makefile
@@ -7,7 +7,7 @@
#
PORTNAME= flashplugin
-PORTVERSION= 10.2r153
+PORTVERSION= 10.2r159.1
CATEGORIES= www multimedia linux
MASTER_SITES= http://fpdownload.macromedia.com/get/flashplayer/current/:plugin \
ftp://ftp.ipt.ru/pub/download/:suplib
diff --git a/www/linux-f10-flashplugin11/distinfo b/www/linux-f10-flashplugin11/distinfo
index 92ec62c3e71b..a93000320ab5 100644
--- a/www/linux-f10-flashplugin11/distinfo
+++ b/www/linux-f10-flashplugin11/distinfo
@@ -1,4 +1,4 @@
-SHA256 (flashplugin/10.2r153/install_flash_player_10_linux.tar.gz) = 57889f6cf023927fbf50ca4d7496c0e2aa1eabad76120a18c8e4b7be57e9aaf9
-SIZE (flashplugin/10.2r153/install_flash_player_10_linux.tar.gz) = 4967805
-SHA256 (flashplugin/10.2r153/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf
-SIZE (flashplugin/10.2r153/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455
+SHA256 (flashplugin/10.2r159.1/install_flash_player_10_linux.tar.gz) = e6844572fad1cef47dfa8afea6a6cf1e1191fde30041947d5beab1445e0ed742
+SIZE (flashplugin/10.2r159.1/install_flash_player_10_linux.tar.gz) = 4967668
+SHA256 (flashplugin/10.2r159.1/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 4a309b1a326bd2212cc72480628659e5a7fd61d9e0572cb7350c206f030955bf
+SIZE (flashplugin/10.2r159.1/linux-f10-flashsupport-9.0.1.i386.tar.gz) = 3455