From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 22273 invoked by alias); 20 Nov 2014 11:17:34 -0000 Mailing-List: contact cygwin-announce-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-announce-owner@cygwin.com Reply-To: The Cygwin Mailing List Mail-Followup-To: cygwin-announce@cygwin.com Received: (qmail 2380 invoked by uid 89); 20 Nov 2014 11:07:42 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=2.8 required=5.0 tests=AWL,BAYES_40,RCVD_IN_DNSWL_NONE,SPF_SOFTFAIL,T_HK_NAME_DR,UNSUBSCRIBE_BODY autolearn=no version=3.3.2 X-HELO: mout.kundenserver.de Date: Thu, 20 Nov 2014 11:17:00 -0000 Message-Id: <87oas2f7va.fsf@leila.volkerzell.de> From: Dr. Volker Zell Subject: Updated: {liblzo2_2/liblzo2-devel/liblzo2-doc}-2.08-1: LZO data compression library To: cygwin-announce@cygwin.com X-UI-Out-Filterresults: notjunk:1; X-SW-Source: 2014-11/txt/msg00043.txt.bz2 Hi New versions of 'liblzo2_2/liblzo2-devel/liblzo2-doc' have been uploaded to a server near you. o Update to latest upstream version o Build for cygwin 1.7.32 with gcc-4.8.3 o Package name change: liblzo2 -> liblzo2-doc liblzo2 NEWS: ============= Changes in 2.08 (29 Jun 2014) * Updated the Autoconf scripts to fix some reported build problems. * Added CMake build support. * Fixed lzo_init() on big-endian architectures like Sparc. Changes in 2.07 (25 Jun 2014) * Fixed a potential integer overflow condition in the "safe" decompressor variants which could result in a possible buffer overrun when processing maliciously crafted compressed input data. Fortunately this issue only affects 32-bit systems and also can only happen if you use uncommonly huge buffer sizes where you have to decompress more than 16 MiB (> 2^24 bytes) untrusted compressed bytes within a single function call, so the practical implications are limited. POTENTIAL SECURITY ISSUE. CVE-2014-4607. * Removed support for ancient configurations like 16-bit "huge" pointers - LZO now requires a flat 32-bit or 64-bit memory model. * Assorted cleanups. CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ================================ If you want to unsubscribe from the cygwin-announce mailing list, please use the automated form at: http://cygwin.com/lists.html#subscribe-unsubscribe If this does not work, then look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain.com cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL.