CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

multimedia/mencoder1.5.0.20260404_2

Convenient video file and movie encoder

Maintainer
riggs@FreeBSD.org
Packages
mencoder 1.5.0.20260404_2
Upstream
up to date
CPE
mplayer:mplayer
WWW
http://www.mplayerhq.hu/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (7)

Show 7 fixed
VuXML entries whose affected range this version has left.

Commits (176)

Thomas Zander (riggs)
Update to recent upstream snapshot (as of 2019-09-28) (minor fixes only)
f3c93f234c
Jan Beich (jbeich)
multimedia/ffmpeg: update to 4.2

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.2:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
325aed58cb
Thomas Zander (riggs)
Update to recent snapshot as of 20190706

Details:
- Upstream fix for possible subtitle corruption during play
- Upstream fix to allow SSE2 aligned loads on subtitle data

MFH:		2019Q3 (with hat: ports-secteam)
9a055cc95b
Thomas Zander (riggs)
Update to snapshot as of 2019-06-29, drop RTC option in mplayer
85f9bfc1ba
Thomas Zander (riggs)
Update to upstream snapshot as of 2019-03-29
338c46e9b8
Jan Beich (jbeich)
multimedia/x264: update to 0.157.2945

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=72db437770fd1ce3961f624dd57a8e75ff65ae0b
ABI:		https://abi-laboratory.pro/tracker/timeline/x264/
4f594e8803
Thomas Zander (riggs)
Fix linking error with lld 7

Details:
- The linker script in mplayer's WRKSRC causes linking problems when
  used with lld 7. Remove it during post-patch

PR:		235957, 220103
Reported by:	jakub_lach@mailplus.pl, dim
Reviewed by:	dim
MFH:		2019Q1
196656c398
Jan Beich (jbeich)
multimedia/libvpx: update 1.8.0

www/firefox, www/firefox-esr, mail/thunderbird wait for upstream fix via
https://bugzilla.mozilla.org/show_bug.cgi?id=1525393

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.7.0..v1.8.0
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
7c039bce3a
Thomas Zander (riggs)
Workaround a hopefully transient linker problem on head

PR:		234845
Reported by:	glebius
6ca9b7a0a7
Thomas Zander (riggs)
Update to upstream snapshot as of 2018-12-24
67ddd370a6
Jan Beich (jbeich)
multimedia/ffmpeg: update to 4.1

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.1:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
0872f77fd4
Thomas Zander (riggs)
Update to upstream snapshot as of 2018-09-20

Details:
- Update to latest upstream snapshot as of 2018-09-20
- Fix build warnings due to USES for gnome and gl
fec7912991
Jan Beich (jbeich)
multimedia/x264: update to 0.155.2917

- HI10P is always built after https://git.videolan.org/?p=x264.git;a=commitdiff;h=71ed44c73124

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=0a84d986e7020f8344f00752e3600b9769cc1e85
ABI:		https://abi-laboratory.pro/tracker/timeline/x264/
d6bccda8d9
Jan Beich (jbeich)
multimedia/ffmpeg: update to 4.0

- FFSERVER support was removed upstream
- libressl now uses libtls backend instead of patching openssl one
- Clang i386 no longer uses 16-byte aligned stack

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.0:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR:		227726
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D15175
c400a2c8b6
Thomas Zander (riggs)
Update to upstream snapshot as of 20180413

Details:
- Update to recent upstream snapshot (20180413)
- Drop SCHROEDINGER OPTION (removed upstream)
- Remove --disable-libdirac-lavc from
  CONFIGURE_ARGS (removed upstream)
3bd6c01d94
Jan Beich (jbeich)
multimedia/libvpx: update 1.7.0

Changes:	https://chromium.googlesource.com/webm/libvpx/+log/v1.6.1..v1.7.0
ABI:		https://abi-laboratory.pro/tracker/timeline/libvpx/
b964b053b6
Jan Beich (jbeich)
multimedia/{lib,}x264: update to 0.152.2854

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=e9a5903edf8ca59ef20e6f4894c196f135af735e
32ea2cb7fc
Thomas Zander (riggs)
Update to recent snapshot (as of 20171220)
de8c6fccb6
Thomas Zander (riggs)
Chase audio/faac update (ABI incompatible to previous version 1.28)

PR:		223416
Submitted by:	riggs
1d012521e0
Thomas Zander (riggs)
Retain API compatibility with faac 1.29.9 and later

Details:
- See PR 223416
7e359aed0e
Jan Beich (jbeich)
multimedia/ffmpeg: update to 3.4

Notable changes:
- i386/amd64 now depend on NASM per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/4f9297ac3b39
- NETCDF is now MYSOFA but the dependency doesn't exist in ports yet
- SCHROEDINGER is gone per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/220b24c7c9
- DRM, LIBRSVG2, LIBXML2 are new options
- ABI isn't completely compatible: some structs have changed

Minor cleanup:
- Don't pass --disable-{in,out}dev when it's already blocked by disabled dependency
- Drop redundant "Enable" from option descriptions
- Switch CDIO_DESC to use Mk/bsd.options.desc.mk

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n3.4:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR:		223057
Exp-run by:	antoine
84e727457f
Thomas Zander (riggs)
Update to a recent upstream snapshot as of 2017-07-22

MFH:		2017Q3
5593b94009
Thomas Zander (riggs)
Update to upstream snapshot as of 2017-04-15

Details:
- Update to upstream snapshot as of 2017-04-15
- Fix stage-qa in mencoder after recent changes to the
  aggressiveness of shebangfix:
  - Fix TOOLS/vobshift.py erroneously missing from
    SHEBANG_FILES
  - Add USES=python and PYTHON_NO_DEPENDS
46829e25ee
Jan Beich (jbeich)
multimedia/mplayer: lift BROKEN after r429960
006180fddc
Thomas Zander (riggs)
Unbundle libass from mplayer / mencoder

Log:
- Use libass from ports instead of bundled version (this likely
  addresses some vulnerabilities since bundled libass is from 2013)
- New default OPTION ASS
- Bump portrevision

Reported by:	jbeich
MFH:		2017Q1
e3c8a23fb6
Thomas Zander (riggs)
Simplify handling of CFLAGS, retire OCFLAGS OPTION

Log:
- Remove OCFLAGS option. This is no longer a big topic since all
  computationally expensive code is handled via external ffmpeg
  libraries now
- Remove BUILD_DEPENDS on yasm. No yasm asm files are compiled
  during mplayer / mencoder build process anymore
- Bump PORTREVISION
90286075f1
Thomas Zander (riggs)
Log: - Update to upstream snapshot as of 2016-12-28 - Unbundle ffmpeg; uses multimedia/ffmpeg now - Refactor shared Makefile target - GNU_CONFIGURE -> HAS_CONFIGURE

Differential Revision:	https://reviews.freebsd.org/D8930
362a63e294
Thomas Zander (riggs)
Port rtsp fixes from multimedia/ffmpeg changeset r427233

MFH:		2016Q4
0101602007
Mark Linimon (linimon)
Mark as broken on various tier-2 archs.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)
6d5d36d741
Jan Beich (jbeich)
multimedia/x264: update to 0.148.2708

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=86b71982e131eaa70125f8d0e725fcade9c4c677
Differential Revision:	https://reviews.freebsd.org/D7958
Approved by:	koobs (maintainer)
4d4012b533
Thomas Zander (riggs)
Update to recent upstream snapshot as of 2016-09-12

While on it:
- Add missing USE_XORG=xext for X11 OPTION
- Import patch by bar@ to deal with certain other ports
  e.g. x11/slim
ad1847f8ce
Thomas Zander (riggs)
Add DVDNAV_DESC
cce31a2e11
Thomas Zander (riggs)
Add DVDNAV to default options to allow the mencoder package to access DVDs
d12bd00f0b
Thomas Zander (riggs)
Fix UTF-8 subtitle rendering: Make FONTCONFIG a default OPTION

Reported by:	glebius
d1f77a3d63
Thomas Zander (riggs)
Drop support for expired port multimedia/linux-realplayer

PR:		211675
Submitted by:	rene
Reviewed by:	riggs
71fadc0d4f
Mathieu Arnold (mat)
When there is a do-install target, do not use a post-install target, do everything at once.  Sometime, rename post-install into a options helper target.

I did not fix ports that were such a mess that I could not figure out
what they really wanted to do.  I also did not change ports that had
some version of an auto-plist code in post-install, for the same reason.

With hat:	portmgr
Sponsored by:	Absolight
f899c758a6
Dmitry Marakasov (amdmi3)
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed

Approved by:	portmgr blanket
c86e9d9724
Thomas Zander (riggs)
Update to snapshots of mplayer and ffmpeg as of 2016-05-08
68ec7939af
Thomas Zander (riggs)
Update to snapshots as of 2016-04-09 including bundled ffmpeg
9a3ec65015
Mathieu Arnold (mat)
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Tijl Coosemans (tijl)
- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol   supported by libgnutls-dane and gnutls-cli.  Also clarify the option   description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4.  Some ports used this library   in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed.  Ports t

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)
6bc6f3a9e0
Thomas Zander (riggs)
Enable speex audio codec as non-default OPTION

Proposed by:	Stefan Ehmann <shoesoft@gmx.net>
0e760209ba
Thomas Zander (riggs)
Update to upstream version 1.3.0 from 2016-02-16

- Use released version instead of svn snapshot for this distfile
- Update MASTER_SITES to fetch from mplayer.hq instead of LOCAL for
  this distfile
- Use bundled ffmpeg-3.0
46afd447a6
Thomas Zander (riggs)
- Build with ffmpeg-2.8.6 - Fix CVE-2016-2213: out-of-bounds array read access in JPEG2000 decoder

MFH:		2016Q1
Security:	CVE-2016-2213
2f6ab7bfa9
Thomas Zander (riggs)
Build with ffmpeg-2.8.5; fix zero-day remote vulnerability

Both mentioned CVE IDs refer to vulnerabilities where a remote attacker
can read arbitrary files by using the subfile protocol in an HTTP Live
Streaming (HLS) M3U8 file. Building with 2.8.5 fixes those.

MFH:		2016Q1
Security:	CVE-2016-1897
		CVE-2016-1898
a61a04cd14
Thomas Zander (riggs)
Use ffmpeg 2.8.4 for mplayer / mencoder
ba751ac7b2
Thomas Zander (riggs)
Update to mplayer snapshot as of 20151219
e6497e21cf
Antoine Brodin (antoine)
Update giflib to 5.1.1

PR:		204492
0e8c3bf1b3
Thomas Zander (riggs)
Build with ffmpeg 2.8.3, bump PORTREVISION
3b392083a8
Thomas Zander (riggs)
Build mplayer/mencoder with latest ffmpeg release 2.8.2

- Let mplayer/mencoder use the most recent multimedia/ffmpeg distfile
- Bump PORTREVISION
273dbb13c0