Hi! Even if OpenBSD shouldn't be vulnerable, the plugin itself is bugged (and not so useful either):
http://scarybeastsecurity.blogspot.it/2016/11/0day-exploit-compromising-linux-desktop.html So, why not disabling it? Ubuntu did the same: https://bugs.launchpad.net/ubuntu/+source/gst-plugins-bad0.10/+bug/1641700 Cheers, David Index: Makefile =================================================================== RCS file: /cvs/ports/multimedia/gstreamer-0.10/plugins-bad/Makefile,v retrieving revision 1.93 diff -u -p -u -p -r1.93 Makefile --- Makefile 4 Nov 2016 11:35:19 -0000 1.93 +++ Makefile 15 Nov 2016 19:43:54 -0000 @@ -12,7 +12,7 @@ PKGNAME-main= gstreamer-plugins-bad-${V PKGNAME-neon= gstreamer-neon-${V} PKGNAME-mjpeg= gstreamer-mjpeg-${V} -REVISION-main= 24 +REVISION-main= 25 REVISION-mjpeg= 10 REVISION-neon= 11 @@ -101,6 +101,7 @@ CONFIGURE_ARGS= --disable-acm \ --disable-musicbrainz \ --disable-mythtv \ --disable-nas \ + --disable-nsf \ --disable-ofa \ --disable-openal \ --disable-opencv \ Index: patches/patch-gst_nsf_gstnsf_c =================================================================== RCS file: patches/patch-gst_nsf_gstnsf_c diff -N patches/patch-gst_nsf_gstnsf_c --- patches/patch-gst_nsf_gstnsf_c 6 Sep 2012 14:30:59 -0000 1.5 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,15 +0,0 @@ -$OpenBSD: patch-gst_nsf_gstnsf_c,v 1.5 2012/09/06 14:30:59 ajacoutot Exp $ - -nsf_init -> gstnsf_init to prevent symbol conflict with security/nss - ---- gst/nsf/gstnsf.c.orig Fri Dec 30 19:24:33 2011 -+++ gst/nsf/gstnsf.c Mon Mar 5 14:44:23 2012 -@@ -168,7 +168,7 @@ gst_nsfdec_class_init (GstNsfDec * klass) - GST_DEBUG_CATEGORY_INIT (nsfdec_debug, "nsfdec", 0, - "NES sound file (nsf) decoder"); - -- nsf_init (); -+ gstnsf_init (); - } - - static void Index: patches/patch-gst_nsf_nsf_c =================================================================== RCS file: patches/patch-gst_nsf_nsf_c diff -N patches/patch-gst_nsf_nsf_c --- patches/patch-gst_nsf_nsf_c 6 Sep 2012 14:30:59 -0000 1.2 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,15 +0,0 @@ -$OpenBSD: patch-gst_nsf_nsf_c,v 1.2 2012/09/06 14:30:59 ajacoutot Exp $ - -nsf_init -> gstnsf_init to prevent symbol conflict with security/nss - ---- gst/nsf/nsf.c.orig Thu Nov 27 13:08:14 2008 -+++ gst/nsf/nsf.c Thu Nov 27 13:08:46 2008 -@@ -376,7 +376,7 @@ nes_shutdown (nsf_t * nsf) - } - - int --nsf_init (void) -+gstnsf_init (void) - { - nes6502_init (); - return 0; Index: patches/patch-gst_nsf_nsf_h =================================================================== RCS file: patches/patch-gst_nsf_nsf_h diff -N patches/patch-gst_nsf_nsf_h --- patches/patch-gst_nsf_nsf_h 6 Sep 2012 14:30:59 -0000 1.2 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,15 +0,0 @@ -$OpenBSD: patch-gst_nsf_nsf_h,v 1.2 2012/09/06 14:30:59 ajacoutot Exp $ - -nsf_init -> gstnsf_init to prevent symbol conflict with security/nss - ---- gst/nsf/nsf.h.orig Thu Nov 27 13:08:22 2008 -+++ gst/nsf/nsf.h Thu Nov 27 13:08:56 2008 -@@ -132,7 +132,7 @@ struct nsf_loader_t { - }; - - /* Function prototypes */ --extern int nsf_init(void); -+extern int gstnsf_init(void); - - extern nsf_t * nsf_load_extended(struct nsf_loader_t * loader); - extern nsf_t *nsf_load(const char *filename, void *source, int length); Index: pkg/PLIST-main =================================================================== RCS file: /cvs/ports/multimedia/gstreamer-0.10/plugins-bad/pkg/PLIST-main,v retrieving revision 1.25 diff -u -p -u -p -r1.25 PLIST-main --- pkg/PLIST-main 23 Apr 2015 11:55:02 -0000 1.25 +++ pkg/PLIST-main 15 Nov 2016 19:43:54 -0000 @@ -100,7 +100,6 @@ lib/gstreamer-${VERSION}/libgstmpegvideo lib/gstreamer-${VERSION}/libgstmusepack.so lib/gstreamer-${VERSION}/libgstmve.so lib/gstreamer-${VERSION}/libgstmxf.so -lib/gstreamer-${VERSION}/libgstnsf.so lib/gstreamer-${VERSION}/libgstnuvdemux.so lib/gstreamer-${VERSION}/libgstopus.so lib/gstreamer-${VERSION}/libgstpatchdetect.so
