public inbox for cygwin-announce@cygwin.com
 help / color / mirror / Atom feed
* Updated: {liblzo2_2/liblzo2-devel/liblzo2-doc}-2.08-1: LZO data compression library
@ 2014-11-20 11:17 Dr. Volker Zell
  0 siblings, 0 replies; only message in thread
From: Dr. Volker Zell @ 2014-11-20 11:17 UTC (permalink / raw)
  To: cygwin-announce

Hi

New versions of 'liblzo2_2/liblzo2-devel/liblzo2-doc' have been uploaded to a server near you.

 o Update to latest upstream version
 o Build for cygwin 1.7.32 with gcc-4.8.3
 o Package name change:  liblzo2 -> liblzo2-doc

liblzo2 NEWS:
=============
  
Changes in 2.08 (29 Jun 2014)
  * Updated the Autoconf scripts to fix some reported build problems.
  * Added CMake build support.
  * Fixed lzo_init() on big-endian architectures like Sparc.

Changes in 2.07 (25 Jun 2014)
  * Fixed a potential integer overflow condition in the "safe" decompressor
    variants which could result in a possible buffer overrun when
    processing maliciously crafted compressed input data.

    Fortunately this issue only affects 32-bit systems and also can only happen
    if you use uncommonly huge buffer sizes where you have to decompress more
    than 16 MiB (> 2^24 bytes) untrusted compressed bytes within a single
    function call, so the practical implications are limited.

    POTENTIAL SECURITY ISSUE. CVE-2014-4607.

  * Removed support for ancient configurations like 16-bit "huge" pointers -
    LZO now requires a flat 32-bit or 64-bit memory model.
  * Assorted cleanups.


CYGWIN-ANNOUNCE UNSUBSCRIBE INFO
================================


If you want to unsubscribe from the cygwin-announce mailing list, please
use the automated form at:


http://cygwin.com/lists.html#subscribe-unsubscribe

If this does not work, then look at the "List-Unsubscribe: " tag in the
email header of this message.  Send email to the address specified
there.  It will be in the format:


cygwin-announce-unsubscribe-you=yourdomain.com <at> cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2014-11-20 11:17 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-11-20 11:17 Updated: {liblzo2_2/liblzo2-devel/liblzo2-doc}-2.08-1: LZO data compression library Dr. Volker Zell

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).