[-- Attachment #1: Type: text/plain, Size: 2562 bytes --] Hi Bret, I wanted to revisit a topic I emailed you about recently - the ever-evolving challenge of sales tax rules and the increasing number of audits affecting businesses today. We at The Brennan Group are committed to assisting companies like Cygwin to navigate this complex environment easily. If you missed my previous email, here's a brief reminder of how we can be of service: * Expert Consultation * Timely Electronic Filing * Cost-effective Solutions * Scalable Services I would love to schedule a brief call to explore how we can support Cygwin in being sales-tax compliant without the headaches. Can we arrange a call at your convenience? Looking forward to connecting, Michael G. Brennan President The Brennan Group 314-850-4929 For reference purposes: Hi Bret, Are you worried about your rising liabilities from sales tax Nexus and the record numbers of audits across the states where Cygwin does business? You're not alone. With more than 15,000 taxing jurisdictions nationwide constantly changing regulations and pushing more audits, an already tough accounting job has grown nearly impossible. My company, The Brennan Group, frees companies like yours from this challenge through our expert, on-demand sales tax management service. Using us as their remote tax department, companies of all sizes and industries see immediate benefit, while reducing their risk of audit: * Hands-On Expertise - Our experts manage your state and local tax compliance so you don't have to. * Electronic Filing - Our systems complete and file all state and local returns correctly and on time. * Scalability - Whatever you need, our solution and our people are always there, getting your returns done with no surprises. * Inexpensive - No costly infrastructure, software, or resources required. Just good tax work done right. Bret, I hope I've earned a brief phone call to show you how The Brennan Group can help make Cygwin easily and inexpensively sales-tax compliant wherever you do business. Just reply to this email with a date and time when you're free to discuss, and I'll schedule. I look forward to speaking. Regards, Michael G. Brennan President The Brennan Group 314-850-4929 12221 Big Bend Rd, Saint Louis, MO 63122 If you would prefer cygwin-announce@cygwin.com be excluded from our next outreach, please click here http://i.ms00.net/remove?BrennanGroup:*:1710509576.44630:cygwin-announce%40cygwin.com:e . This message was sent to cygwin-announce@cygwin.com X-PMG-Recipient: cygwin-announce@cygwin.com pmguid:4br.1c42l.ga4z
The following packages have been upgraded in the Cygwin distribution: * wget 1.24.5 GNU Wget is a file retrieval utility which can use the HTTP, HTTPS, or FTP protocols. Wget features include the ability to work in the background while you're logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest with FTP servers and Range with HTTP servers to retrieve files over slow or unstable connections, support for Proxy servers, and configurability. For more information, please see the project home pages: https://sv.gnu.org/project/wget/ https://www.gnu.org/software/wget/ For changes since the previous Cygwin release see below: https://lists.gnu.org/archive/html/info-gnu/2024-03/msg00002.html https://lists.gnu.org/archive/html/bug-wget/2024-03/msg00008.html NOTE: Upstream bumped this release to 1.24.5 instead of 1.21.5. Noteworthy changes in release 1.24.5 2024-03-10 - Fix how subdomain matches are checked for HSTS. Fixes a minor issue where cookies may be leaked to the wrong domain - Wget will now also parse the srcset attribute in <source> HTML tags - Support reading fetchmail style "user" and "passwd" fields from netrc - In some cases, prevent the confusing "Cannot write to... (success)" error messages - Support extremely fast download speeds (TB/s). Previously this would cause Wget to crash when printing the speed - Improve portability on OpenBSD to run the test suite - Ensure that CSS URLs are corectly quoted (Bug: 64082)
The following Perl distributions have been updated to their latest release version available on CPAN: x86_64 ------ perl-Alien-CFITSIO-4.4.0.2-1 perl-HTML-Parser-3.82-1 perl-PAR-Packer-1.063-1 noarch ------ perl-Business-ISBN-Data-20240313.001-1 perl-HTML-Tagset-3.24-1 perl-libwww-perl-6.77-1 perl-LWP-Protocol-https-6.14-1 perl-Mozilla-CA-20240313-1 --
The following packages have been upgraded in the Cygwin distribution: * dialog 1.3+20240307 * libdialog-devel 1.3+20240307 * libdialog15 1.3+20240307 A script interpreter which provides a set of curses widgets: objects whose appearance and behavior can be customized. For more information see the project home page: https://invisible-island.net/dialog As there are multiple components and many changes each release see below or read /usr/share/doc/dialog/CHANGES after installation: https://invisible-island.net/dialog/CHANGES.html Although this package is used in all *texlive* installations, the changes and impacts appear to be minor, so the upgrade is being released as current stable. NOTE: the version numbering has been changed from 1.3-#.yyyymmdd to 1.3+yyyymmdd to better match upstream's to Cygwin version conventions. 2024/03/07 - add option --color-modes, which can be used to color the content of programbox, tailbox, textbox 2024/03/06 - amend change to formbox while revising --max-input to work with the form's "ilen" parameter - updated configure script, e.g., for compiler-warning fixes. - update config.guess, config.sub
The following package has been upgraded in the Cygwin distribution: * units 2.23-2 The Units program converts quantities expressed in various scales to to their equivalents in other scales. The units program can handle multiplicative scale changes as well as nonlinear conversions such as Fahrenheit to Celsius or wire gauge. Units comes with an annotated, extendable database defining over seven thousand units, including 134 nonlinear units, and 125 prefixes, using ten systems of units including SI, 189 currencies, bitcoin and precious metals prices, plus US CPI Consumer Price Index, all of which may be updated using units_cur. For more information see the project pages: https://gnu.org/s/units/ https://sv.gnu.org/p/units/ For changes since the previous Cygwin release see below or read /usr/share/doc/units/NEWS after installation. A native Windows binary distribution is also available: https://ftpmirror.gnu.org/units/windows/units-2.23-setup.exe NOTE: Changes in this Cygwin release. The postinstall script to update currency exchange rates and commodity prices has been dropped as it was causing problems when installing on systems without Internet access or with network blocks. If you would like to update currency exchange rates and commodity prices, just run units_cur at the command line, in a profile or rc startup script, or in a *daily* cron job. Do *NOT* run units_cur more frequently than daily, as currency exchange rates and commodity prices are updated only at most weekdays, and excessive requests from units users could cause free access to accurate online sources be stopped. Version 2.23 - 18 February 2024 - Added interactively defined variables, with "_" prefix. - Because of the above change, a space may be needed after the last answer symbol "_" in some situations, e.g. "_m" used to compute "_ * m" but now refers to the user variable _m. - molarvolume changed to have dimensions of m^3/mol for consistency with NIST - Corrected erroneous definitions of moondist_min and moondist_max - Added atomic masses for all isotopes of all elements in elements.units - Added US Consumer Price index in cpi.units, which is updated monthly by units_cur. Inflation calculations are possible with dollars_in() or inflation_since() and other related nonlinear units - Made exchangerate-api the default currency server because floatrates was returning incomplete data - Adjusted US survey units to use the international foot by default due to deprecation of the US survey foot - abs() function works on units with dimensions, like -27 degrees. - Support unicode operators for division and multiplication - Ignore QUIT signal, which is sent by Ctrl-Backslash and Ctrl-4. - Suppress repeated unit values in display of unit definitions (e.g. defining byte as "8 bit = 8 bit") - Unit reductions that take more than 1000 steps now give a "circular reference" error. - More detailed reporting from the --check (-c) option. - Fixed bug in positioning pointer to errors in input when the input has leading spaces. - Fixed parser memory leak with numbers too large or small for type double. - Allow multiple divisions in expressions that start with "/", e.g. "/m/s"
The following package has been uploaded to the Cygwin distribution: * mandoc-1.14.6-1 mandoc is a suite of tools compiling mdoc, the roff macro language of choice for BSD manual pages, and man, the predominant historical language for UNIX manuals. It is small, self-contained, and quite fast. The main component of the toolset is the mandoc utility program, based on the libmandoc validating compiler, to format output for UTF-8 and ASCII terminals, HTML 5, PostScript, and PDF. https://mandoc.bsd.lv/ The source package supports reproducible builds. Regards, Christian Franke
Version 2.6.2-1 of expat libexpat-devel libexpat1 are available in the Cygwin distribution: CHANGES Latest upstream release https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes DESCRIPTION Stream-oriented XML parser library written in C. Expat excels with files too large to fit RAM, and where performance and flexibility are crucial. HOMEPAGE https://libexpat.github.io/ Marco Atzeri If you have questions or comments, please send them to the cygwin mailing list at: cygwin (at) cygwin (dot) com .
The following packages have been uploaded to the Cygwin distribution: * exiv2-0.28.2-1 * libexiv2-devel-0.28.2-1 * libexiv2_28-0.28.2-1 * exiv2-0.28.2-1-src * exiv2-debuginfo-0.28.2-1 This is an update to the latest upstream -- Exiv2 is a C++ library and a command line utility to access Exiv, IPTC, and XMP image metadata. HomePage: https://www.exiv2.org/ News: https://github.com/Exiv2/exiv2/releases/tag/v0.28.2 Source: https://github.com/Exiv2/exiv2/tree/v0.28.2 License: GPL2 https://github.com/Exiv2/exiv2/blob/v0.28.2/COPYING Cygwin Package Summary: https://www.cygwin.com/packages/summary/exiv2-src.html Cygport Source: https://www.cygwin.com/git/?p=git/cygwin-packages/exiv2.git -- Lemures Lemniscati
The following packages have been uploaded to the Cygwin distribution: * giflib-5.2.2-1 * giflib-debuginfo-5.2.2-1 * libgif-devel-5.2.2-1 * libgif7-5.2.2-1 Library and utilities for manipulating GIF graphics, with LZW compression support.
The following packages have been uploaded to the Cygwin distribution: * ffmpeg-6.1.1-3 * libavutil58-6.1.1-3 * libavcodec60-6.1.1-3 * libavformat60-6.1.1-3 * libavdevice60-6.1.1-3 * libavfilter9-6.1.1-3 * libswscale7-6.1.1-3 * libswresample4-6.1.1-3 * libpostproc57-6.1.1-3 * libavutil-devel-6.1.1-3 * libavcodec-devel-6.1.1-3 * libavformat-devel-6.1.1-3 * libavdevice-devel-6.1.1-3 * libavfilter-devel-6.1.1-3 * libswscale-devel-6.1.1-3 * libswresample-devel-6.1.1-3 * libpostproc-devel-6.1.1-3 * ffmpeg-examples-6.1.1-3 * ffmpeg-doc-6.1.1-3 FFmpeg is the leading multimedia framework, able to decode, encode, transcode, mux, demux, stream and filter pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. - Rebuild for svt-av1 2.0.0
The following packages have been uploaded to the Cygwin distribution: * aom-3.8.2-1 * libaom3-3.8.2-1 * libaom-devel-3.8.2-1
The following packages have been uploaded to the Cygwin distribution: * svt-av1-2.0.0-1 * libsvtav1enc2-2.0.0-1 * libsvtav1dec0-2.0.0-1 * libsvtav1-devel-2.0.0-1 * libsvtav1-doc-2.0.0-1 The Scalable Video Technology for AV1 (SVT-AV1 Encoder and Decoder) is an AV1-compliant software encoder/decoder library. The work on the SVT-AV1 encoder targets the development of a production-quality AV1-encoder with performance levels applicable to a wide range of applications, from premium VOD to real-time and live encoding/transcoding. The SVT-AV1 decoder implementation targets future codec research activities. - Upstream major version up
The following packages have been uploaded to the Cygwin distribution: * svt-av1-1.8.0-2 * libsvtav1enc1-1.8.0-2 * libsvtav1dec0-1.8.0-2 * libsvtav1-devel-1.8.0-2 * libsvtav1-doc-1.8.0-2 The Scalable Video Technology for AV1 (SVT-AV1 Encoder and Decoder) is an AV1-compliant software encoder/decoder library. The work on the SVT-AV1 encoder targets the development of a production-quality AV1-encoder with performance levels applicable to a wide range of applications, from premium VOD to real-time and live encoding/transcoding. The SVT-AV1 decoder implementation targets future codec research activities. - Change packaging for upcoming v2.0.0
[-- Attachment #1: Type: text/plain, Size: 3430 bytes --] Hi Bret, My previous emails missed you. I was writing to see if Cygwin has a contract, or vendor management solution? Most companies don't because they tend to be extremely expensive. That is until now. We're Trident. Our solution provides a single, centralized repository for all your contracts and is as easy-to-use as it is affordable. In fact, a user license costs no more than $99/month. More importantly, managing all your contracts with Trident will add no less than 10 percent to your bottom line according to the Gartner Group. Bret, let me know when you have a few minutes free to discuss what an additional 10 percent to the bottom line could do for Cygwin. Regards, Todd Steiner Trident Contract Management President/CEO 630-405-0700 For reference purposes: Hi Bret, Sorry my last email missed you. I was writing to ask if you've ever looked at a digital contract management solution to make better sense of all your internal and external agreements? If you have, I suspect you saw potential for great benefit, but nonetheless had trouble justifying the price and complexity of the solution. Well, not any more. Again, we're Trident. We make the decision to invest in a digital contract management solution easy. We're not only simple to deploy and use, we're very, very inexpensive. In fact, a single-user Trident license costs no more than $99/month to manage all of your vendor, employee and client contracts. And better yet, the Gartner Group says such a solution will add 10 percent to your bottom line. Bret, don't wait for that 'one' employee who's been with you forever to leave - the one with all the institutional knowledge about your vendor, employee, or client contracts. We can help 'institutionalize' that institutional memory today. Just give me a date and time when you're free and I'll walk you through how easy and inexpensive it is to add 10 percent to your bottom line. Regards, Todd Steiner Trident Contract Management President/CEO 630-405-0700 For reference purposes: Hi Bret, Does Cygwin have a contract, or vendor management solution? Most companies don't, unless they've failed an audit, or suffered a costly error when they've missed an important date. That's typically the only time the high cost of a contract management solution can be justified. Until now. We're Trident and our solution is not only easy-to-use, it's surprisingly affordable. In fact, a single user license costs no more than $99/month. More importantly, centralizing and managing contracts with Trident will drop 10 percent to Cygwin's bottom line, according to the Gartner Group. Bret, don't wait for that 'one' employee who's been with you forever to leave - the one with all the institutional knowledge about your vendor, employee, or client contracts. We can help 'institutionalize' that institutional memory today. Just give me a date and time when you're free and I'll walk you through how easy and inexpensive it is to add 10 percent to your bottom line. Regards, Todd Steiner Trident Contract Management President/CEO 630-405-0700 2918 Marketplace Drive, Madison, WI 53719 If you would prefer cygwin-announce@cygwin.com be excluded from our next outreach, please click here http://i.ms00.net/remove?trident:*:1710343465.78307:cygwin-announce%40cygwin.com:e . This message was sent to cygwin-announce@cygwin.com X-PMG-Recipient: cygwin-announce@cygwin.com pmguid:3kl.1c3wv.7bf83
The following packages have been uploaded to the Cygwin distribution: * unbound-1.19.3-1 * libunbound8-1.19.3-1 * libunbound-common-1.19.3-1 * libunbound-devel-1.19.3-1 * python3-unbound-1.19.3-1 Unbound is a validating, recursive, and caching DNS resolver. Unbound is designed as a set of modular components, so that also DNSSEC validation and stub-resolvers (that do not run as a server, but are linked into an application) are easily possible.
Version 1.4.75-1 of "lighttpd" has been uploaded. lighttpd is a secure, fast, modular web server with low resource usage lighttpd 1.4.75: incrementally stronger TLS cipher defaults; bugs fixes Note: This cygwin lighttpd-1.4.75-1 release requires >= cygwin-3.5.0 to take advantage of new support for posix_spawn_file_actions_addfchdir_np(). As this support is optional, please contact me if this is a hardship for those unable to upgrade to cygwin-3.5.0 and I can create a package of lighttpd without this feature, whose use merely provides a marginal performance improvement for starting CGI programs. Source: https://git.lighttpd.net/lighttpd/lighttpd1.4.git/ News: https://www.lighttpd.net/ License: BSD 3-clause https://git.lighttpd.net/lighttpd/lighttpd1.4/src/branch/master/COPYING
The following packages have been uploaded to the Cygwin distribution: * osslsigncode-2.8-1 * osslsigncode-debuginfo-2.8-1 Platform-independent tool for Authenticode signing of PE(EXE/SYS/DLL/etc), CAB and MSI files - uses OpenSSL and libcurl. It also supports timestamping (Authenticode and RFC3161).
The following packages have been uploaded to the Cygwin distribution: * openssh-9.7p1-1 OpenSSH is a program for logging into a remote machine and for executing commands on a remote machine. It can replace rlogin and rsh, providing encrypted communication between two machines. ======================================================================== PLEASE READ THE BELOW FUTURE DEPRECATION NOTICE!!! ======================================================================== OpenSSH 9.7 has just been released. It will be available from the mirrors listed at https://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots or donated to the project. More information on donations may be found at: https://www.openssh.com/donations.html Future deprecation notice ========================= OpenSSH plans to remove support for the DSA signature algorithm in early 2025 and compile-time disable it later this year. DSA, as specified in the SSHv2 protocol, is inherently weak - being limited to a 160 bit private key and use of the SHA1 digest. Its estimated security level is only 80 bits symmetric equivalent. OpenSSH has disabled DSA keys by default since 2015 but has retained run-time optional support for them. DSA was the only mandatory-to- implement algorithm in the SSHv2 RFCs[3], mostly because alternative algorithms were encumbered by patents when the SSHv2 protocol was specified. This has not been the case for decades at this point and better algorithms are well supported by all actively-maintained SSH implementations. We do not consider the costs of maintaining DSA in OpenSSH to be justified and hope that removing it from OpenSSH can accelerate its wider deprecation in supporting cryptography libraries. This release makes DSA support in OpenSSH compile-time optional, defaulting to on. We intend the next release to change the default to disable DSA at compile time. The first OpenSSH release of 2025 will remove DSA support entirely. Changes since OpenSSH 9.6 ========================= This release contains mostly bugfixes. New features ------------ * ssh(1), sshd(8): add a "global" ChannelTimeout type that watches all open channels and will close all open channels if there is no traffic on any of them for the specified interval. This is in addition to the existing per-channel timeouts added recently. This supports situations like having both session and x11 forwarding channels open where one may be idle for an extended period but the other is actively used. The global timeout could close both channels when both have been idle for too long. * All: make DSA key support compile-time optional, defaulting to on. Bugfixes -------- * sshd(8): don't append an unnecessary space to the end of subsystem arguments (bz3667) * ssh(1): fix the multiplexing "channel proxy" mode, broken when keystroke timing obfuscation was added. (GHPR#463) * ssh(1), sshd(8): fix spurious configuration parsing errors when options that accept array arguments are overridden (bz3657). * ssh-agent(1): fix potential spin in signal handler (bz3670) * Many fixes to manual pages and other documentation, including GHPR#462, GHPR#454, GHPR#442 and GHPR#441. * Greatly improve interop testing against PuTTY. Portability ----------- * Improve the error message when the autoconf OpenSSL header check fails (bz#3668) * Improve detection of broken toolchain -fzero-call-used-regs support (bz3645). * Fix regress/misc/fuzz-harness fuzzers and make them compile without warnings when using clang16 Checksums: ========== - SHA1 (openssh-9.7.tar.gz) = 163272058edc20a8fde81661734a6684c9b4db11 - SHA256 (openssh-9.7.tar.gz) = gXDWrF4wN2UWyPjyjvVhpjjKd7D2qI6LyZiIYhbJQVg= - SHA1 (openssh-9.7p1.tar.gz) = ce8985ea0ea2f16a5917fd982ade0972848373cc - SHA256 (openssh-9.7p1.tar.gz) = SQQm92bYKidj/KzY2D6j1weYdQx70q/y5X3FZg93P/0= Please note that the SHA256 signatures are base64 encoded and not hexadecimal (which is the default for most checksum tools). The PGP key used to sign the releases is available from the mirror sites: https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc Reporting Bugs: =============== - Please read https://www.openssh.com/report.html Security bugs should be reported directly to openssh@openssh.com
The following packages have been uploaded to the Cygwin distribution: * wavpack-5.7.0-1 * libwavpack1-5.7.0-1 * libwavpack-devel-5.7.0-1 WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled performance and functionality.
The following packages have been uploaded to the Cygwin distribution: * unbound-1.19.2-1 * libunbound8-1.19.2-1 * libunbound-common-1.19.2-1 * libunbound-devel-1.19.2-1 * python3-unbound-1.19.2-1 Unbound is a validating, recursive, and caching DNS resolver. Unbound is designed as a set of modular components, so that also DNSSEC validation and stub-resolvers (that do not run as a server, but are linked into an application) are easily possible. - Fix CVE-2024-1931
The following packages have been uploaded to the Cygwin distribution: * libpango1.0_0-1.52.1-1 * libpango1.0-devel-1.52.1-1 * libpango1.0-doc-1.52.1-1 * girepository-Pango1.0-1.52.1-1 Pango is a library for layout and rendering of text, with an emphasis on internationalization. Pango can be used anywhere that text layout is needed; however, most of the work on Pango so far has been done using the GTK+ widget toolkit as a test platform. Pango forms the core of text and font handling for GTK+.
The following packages have been uploaded to the Cygwin distribution: * liborc0.4_0-0.4.38-1 * liborc0.4-devel-0.4.38-1 * liborc0.4-doc-0.4.38-1 Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The language is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.
The following packages have been uploaded to the Cygwin distribution: * libopenmpt0-0.7.4-1 * libopenmpt-devel-0.7.4-1 * openmpt123-0.7.4-1 libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream.
The following packages have been uploaded to the Cygwin distribution: * libSDL2_2.0_0-2.30.1-1 * libSDL2-devel-2.30.1-1 This is the Simple DirectMedia Layer, a general API that provides low level access to audio, keyboard, mouse, joystick, 3D hardware via OpenGL, and 2D framebuffer across multiple platforms. - Upstream bug fix release
The following Perl distributions have been updated to their latest release version available on CPAN: x86_64 ------ perl-Alien-CFITSIO-4.4.0.1-1 perl-PAR-Packer-1.062-1 noarch ------ perl-Business-ISBN-Data-20240308.001-1 perl-CGI-4.63-1 perl-ExtUtils-CChecker-0.12-1 perl-HTML-Tagset-3.22-1 perl-Mojolicious-9.36-1 perl-PAR-1.020-1 --