From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from vsmx012.vodafonemail.xion.oxcs.net (vsmx012.vodafonemail.xion.oxcs.net [153.92.174.90]) by sourceware.org (Postfix) with ESMTPS id 3E5DD3857831 for ; Wed, 21 Oct 2020 17:03:44 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 3E5DD3857831 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=nexgo.de Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=Stromeko@nexgo.de Received: from vsmx004.vodafonemail.xion.oxcs.net (unknown [192.168.75.198]) by mta-8-out.mta.xion.oxcs.net (Postfix) with ESMTP id 5753CF35644 for ; Wed, 21 Oct 2020 17:03:43 +0000 (UTC) Received: from Gertrud (unknown [84.160.202.5]) by mta-8-out.mta.xion.oxcs.net (Postfix) with ESMTPA id 313E619ADC1 for ; Wed, 21 Oct 2020 17:03:41 +0000 (UTC) From: Achim Gratz To: cygwin-apps@cygwin.com Subject: Re: libfreetype CVE FYI References: <3375f26a-9c09-9fba-387e-3ba07618eb9f@cornell.edu> <38e606cc-4c32-5067-dc86-a9d22cc88311@SystematicSw.ab.ca> Date: Wed, 21 Oct 2020 19:03:40 +0200 In-Reply-To: (Ken Brown via Cygwin-apps's message of "Tue, 20 Oct 2020 14:00:09 -0400") Message-ID: <87mu0fmryr.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-VADE-STATUS: LEGIT X-Spam-Status: No, score=-2.2 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: cygwin-apps@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Cygwin package maintainer discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Oct 2020 17:03:46 -0000 Ken Brown via Cygwin-apps writes: >> https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/ > > Thanks, Brian. I'll update it. Did you intend to release this security / minor version update as a test release? It would seem more prudent to just update the package or do you expect problems? Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Wavetables for the Waldorf Blofeld: http://Synth.Stromeko.net/Downloads.html#BlofeldUserWavetables