X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:mime-version:date:subject:message-id :references:in-reply-to:to:content-type :content-transfer-encoding; q=dns; s=default; b=JWJosdIzcr0wOyfO i5aGmzbg8RA5sYAZbnFQPquy+WFTeDh3FtWS2OulyIocyQOsbT3gNkOWjiqF0qw1 YcgsxfHP7ttfYyogta0P3u/eLeLzInYF21NrztuHm3zYCQp/ptTT2AttoBps6BTf D3XjbrBw5ARNxPlMnbFB+EZmA5Y= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:mime-version:date:subject:message-id :references:in-reply-to:to:content-type :content-transfer-encoding; s=default; bh=4ynsip4FdMGmq15MZfcAiR dw4ws=; b=hLNfs5CQI8T3KfUytobG+SxSu9t01qanadcmZSsUMLkZ8Gl9A+R5YY +yw93AK6GGmIrRLhvkdKceu6Ltm5MIyFNzAVyxMBerErNJA+XsTj2lxAdRtBYxs7 gIwWqFoksKRc59s6hpYmS3jrqI+Ex2dnpHPinPqJIE7MjYiBEDxFE= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.7 required=5.0 tests=BAYES_05,GIT_PATCH_2,HTML_IMAGE_ONLY_32,HTML_MESSAGE,KAM_NUMSUBJECT,MIME_QP_LONG_LINE,RCVD_IN_DNSWL_LOW,SPF_PASS,T_REMOTE_IMAGE autolearn=ham version=3.3.2 spammy=HContent-type:alternative, linkedinpng, linkedin.png, UD:linkedin.png X-HELO: st11p01im-asmtp002.me.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2018-03-17_11:,, signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 clxscore=1011 suspectscore=3 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1707230000 definitions=main-1803170269 From: Daniel Blanchet MIME-version: 1.0 (1.0) Date: Sat, 17 Mar 2018 17:29:57 -0400 Subject: Re: [SECURITY] Updated: libvorbis-1.3.6-1 Message-id: <02359946-626A-461F-9A52-8EFEA20C47C5@icloud.com> References: In-reply-to: To: The Cygwin Mailing List Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id w2HLUS0d022073 Daniel Blanchet daniel AT dblanchet DOT net > Le 17 mars 2018 à 17:06, David Rothenberger a écrit : > > A new version of the libvorbis, libvorbis-devel, libvorbis0, > libvorbisenc2, and libvorbisfile3 packages are now available for > download. > > SECURITY: > ========= > Fixes CVE-2018-5146 > > DESCRIPTION: > ============ > Vorbis is a general purpose audio and music encoding format > contemporary to MPEG-4's AAC and TwinVQ, the next generation beyond > MPEG audio layer 3. Unlike the MPEG sponsored formats (and other > proprietary formats such as RealAudio G2 and Windows' flavor of the > month), the Vorbis CODEC specification belongs to the public > domain. All the technical details are published and documented, and > any software entity may make full use of the format without license > fee, royalty or patent concerns. > > This package contains: > > * libvorbis, a BSD-style license software implementation of > the Vorbis specification by the Xiph.Org Foundation > (http://www.xiph.org/) > > * libvorbisfile, a BSD-style license convenience library > built on Vorbis designed to simplify common uses > > * libvorbisenc, a BSD-style license library that provides a simple, > programmatic encoding setup interface > > QUESTIONS: > ========== > If you want to make a point or ask a question the Cygwin mailing list is > the appropriate place. > > -- > David Rothenberger ---- daveroth AT acm DOT org > -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple