Module Name:	pkgsrc
Committed By:	snj
Date:		Sat Jan 15 07:00:18 UTC 2005

Modified Files:
	pkgsrc/audio/mpg123 [pkgsrc-2004Q4]: Makefile distinfo
	pkgsrc/audio/mpg123-esound [pkgsrc-2004Q4]: Makefile
	pkgsrc/audio/mpg123-nas [pkgsrc-2004Q4]: Makefile
	pkgsrc/audio/mpg123/patches [pkgsrc-2004Q4]: patch-ar
Added Files:
	pkgsrc/audio/mpg123/patches [pkgsrc-2004Q4]: patch-as patch-at

Log Message:
Pullup ticket 227 - requested by Matthias Drochner
security fix for mpg123

   Module Name:  pkgsrc
   Committed By: drochner
   Date:         Fri Jan  7 14:52:13 UTC 2005

   Modified Files:
         pkgsrc/audio/mpg123: Makefile distinfo
   Added Files:
         pkgsrc/audio/mpg123/patches: patch-as patch-at

   Log Message:
   Fix a buffer overflow by a malicous playlist (CAN-2004-1284).
   Being here, fix a possible problem which was mentioned in conjunction
   with CAN-2003-0577 - zero bitrate makes mpg123 assume a negative
   frame size.
   bump PKGREVISION
---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Wed Jan 12 11:52:38 UTC 2005

   Modified Files:
           pkgsrc/audio/mpg123: distinfo
           pkgsrc/audio/mpg123/patches: patch-ar

   Log Message:
   another header valdation (CAN-2004-0991)
   ride on recent PKGREVISION bump
---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Wed Jan 12 14:17:44 UTC 2005

   Modified Files:
           pkgsrc/audio/mpg123: Makefile
           pkgsrc/audio/mpg123-esound: Makefile
           pkgsrc/audio/mpg123-nas: Makefile

   Log Message:
   PKGREVISION bump for security fix (previous bump was >4 days ago.


To generate a diff of this commit:
cvs rdiff -r1.37 -r1.37.2.1 pkgsrc/audio/mpg123/Makefile
cvs rdiff -r1.19 -r1.19.2.1 pkgsrc/audio/mpg123/distinfo
cvs rdiff -r1.9 -r1.9.2.1 pkgsrc/audio/mpg123-esound/Makefile
cvs rdiff -r1.10 -r1.10.2.1 pkgsrc/audio/mpg123-nas/Makefile
cvs rdiff -r1.1 -r1.1.4.1 pkgsrc/audio/mpg123/patches/patch-ar
cvs rdiff -r0 -r1.1.2.1 pkgsrc/audio/mpg123/patches/patch-as \
    pkgsrc/audio/mpg123/patches/patch-at

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.