From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 100688 invoked by alias); 17 Mar 2018 21:09:41 -0000 Mailing-List: contact cygwin-announce-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-announce-owner@cygwin.com Reply-To: The Cygwin Mailing List Mail-Followup-To: cygwin-announce@cygwin.com Received: (qmail 83096 invoked by uid 89); 17 Mar 2018 21:07:04 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.7 required=5.0 tests=AWL,BAYES_00,GIT_PATCH_2,KAM_NUMSUBJECT,RCVD_IN_DNSWL_NONE,SPF_SOFTFAIL autolearn=ham version=3.3.2 spammy=contemporary, mpeg, fee, month X-HELO: resqmta-ch2-03v.sys.comcast.net To: cygwin-announce@cygwin.com From: David Rothenberger Subject: [SECURITY] Updated: libvorbis-1.3.6-1 Message-ID: Date: Sat, 17 Mar 2018 21:09:00 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4wfJn3vvcr0ET21d9/h2ARVI9iHvc8WOvl8vuuRjsrynz/sVNYGiQn9OXjUwOUHBJiuDfH6745tweKDJUlB09MieziNoS3nJSUqFzqACQHjNNqLH6V3FXs hJC/l+n3yxBQy/5dzGm9xKXPoNh2/MzdT0uB3ZpKBEjBjz9WcMJQZ51YqnO6mdnl7I8RcqFV154sGg== X-SW-Source: 2018-03/txt/msg00024.txt.bz2 A new version of the libvorbis, libvorbis-devel, libvorbis0, libvorbisenc2, and libvorbisfile3 packages are now available for download. SECURITY: ========= Fixes CVE-2018-5146 DESCRIPTION: ============ Vorbis is a general purpose audio and music encoding format contemporary to MPEG-4's AAC and TwinVQ, the next generation beyond MPEG audio layer 3. Unlike the MPEG sponsored formats (and other proprietary formats such as RealAudio G2 and Windows' flavor of the month), the Vorbis CODEC specification belongs to the public domain. All the technical details are published and documented, and any software entity may make full use of the format without license fee, royalty or patent concerns. This package contains: * libvorbis, a BSD-style license software implementation of the Vorbis specification by the Xiph.Org Foundation (http://www.xiph.org/) * libvorbisfile, a BSD-style license convenience library built on Vorbis designed to simplify common uses * libvorbisenc, a BSD-style license library that provides a simple, programmatic encoding setup interface QUESTIONS: ========== If you want to make a point or ask a question the Cygwin mailing list is the appropriate place. -- David Rothenberger ---- daveroth@acm.org