X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:message-id:date:mime-version :content-type:content-transfer-encoding:reply-to; q=dns; s= default; b=pfgVewrzGqWuIkR7hZjh84aTAzIfDvoOFbtOGCS5CWj4itDnmt0TN NFt+86tuTRV7ZIizinDjOtCk0ur6Tkf3jXyBFu20RBgZuEd4xMBRYCJ5bW22aWeL 59EJ/B3gPmLFALwZsxQa746QnxYEpON3hprnUISUzMsbVm+FCpgO44= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:message-id:date:mime-version :content-type:content-transfer-encoding:reply-to; s=default; bh= xNkp3wx65NRuQRKJb7XI9TROmqE=; b=AGr9ZOOnzixtWyLzkSYVV6qr5akxqCNf G75MlpG1vru+o5MikM9chfQJ/k23+0bK4Il4HCa6CydarrpjwdHZ1WxR8CL4+6iM nWBPkK5YPenp2cPhsHZnx4nzm2vtJ0HiQcAHW6S48p1N+1X95t+gwO5VGmOjBAtH GmGX+n1gImA= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.2 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00,FORGED_MUA_MOZILLA,GIT_PATCH_2,KAM_NUMSUBJECT autolearn=ham version=3.3.2 spammy=fee, month, music, audio X-HELO: localhost.localdomain Authentication-Results: sourceware.org; auth=none X-Virus-Found: No To: cygwin AT cygwin DOT com From: David Rothenberger Subject: [ANNOUNCEMENT] [SECURITY] Updated: libvorbis-1.3.6-1 Message-Id: Date: Sat, 17 Mar 2018 14:06:58 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4wfJn3vvcr0ET21d9/h2ARVI9iHvc8WOvl8vuuRjsrynz/sVNYGiQn9OXjUwOUHBJiuDfH6745tweKDJUlB09MieziNoS3nJSUqFzqACQHjNNqLH6V3FXs hJC/l+n3yxBQy/5dzGm9xKXPoNh2/MzdT0uB3ZpKBEjBjz9WcMJQZ51YqnO6mdnl7I8RcqFV154sGg== X-IsSubscribed: yes Reply-To: cygwin AT cygwin DOT com A new version of the libvorbis, libvorbis-devel, libvorbis0, libvorbisenc2, and libvorbisfile3 packages are now available for download. SECURITY: ========= Fixes CVE-2018-5146 DESCRIPTION: ============ Vorbis is a general purpose audio and music encoding format contemporary to MPEG-4's AAC and TwinVQ, the next generation beyond MPEG audio layer 3. Unlike the MPEG sponsored formats (and other proprietary formats such as RealAudio G2 and Windows' flavor of the month), the Vorbis CODEC specification belongs to the public domain. All the technical details are published and documented, and any software entity may make full use of the format without license fee, royalty or patent concerns. This package contains: * libvorbis, a BSD-style license software implementation of the Vorbis specification by the Xiph.Org Foundation (http://www.xiph.org/) * libvorbisfile, a BSD-style license convenience library built on Vorbis designed to simplify common uses * libvorbisenc, a BSD-style license library that provides a simple, programmatic encoding setup interface QUESTIONS: ========== If you want to make a point or ask a question the Cygwin mailing list is the appropriate place. -- David Rothenberger ---- daveroth AT acm DOT org -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple