From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <cygwin-apps-return-37787-listarch-cygwin-apps=sources.redhat.com@cygwin.com>
Received: (qmail 26881 invoked by alias); 26 Sep 2016 15:18:46 -0000
Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm
Precedence: bulk
Sender: cygwin-apps-owner@cygwin.com
List-Id: <cygwin-apps.cygwin.com>
List-Subscribe: <mailto:cygwin-apps-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin-apps/>
List-Post: <mailto:cygwin-apps@cygwin.com>
List-Help: <mailto:cygwin-apps-help@cygwin.com>, <http://sourceware.org/lists.html#faqs>
Mail-Followup-To: cygwin-apps@cygwin.com
Received: (qmail 26854 invoked by uid 89); 26 Sep 2016 15:18:46 -0000
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-1.1 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY,SPF_HELO_PASS autolearn=no version=3.3.2 spammy=H*Ad:U*yselkowitz, H*MI:cygwin, H*M:cygwin, Volker
X-HELO: mx1.redhat.com
Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 26 Sep 2016 15:18:36 +0000
Received: from int-mx14.intmail.prod.int.phx2.redhat.com (int-mx14.intmail.prod.int.phx2.redhat.com [10.5.11.27])	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))	(No client certificate requested)	by mx1.redhat.com (Postfix) with ESMTPS id EEC7B9D0D8	for <cygwin-apps@cygwin.com>; Mon, 26 Sep 2016 15:18:34 +0000 (UTC)
Received: from [10.10.116.22] (ovpn-116-22.rdu2.redhat.com [10.10.116.22])	by int-mx14.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u8QFIXHX017111	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)	for <cygwin-apps@cygwin.com>; Mon, 26 Sep 2016 11:18:34 -0400
To: cygwin-apps@cygwin.com
From: Yaakov Selkowitz <yselkowitz@cygwin.com>
Subject: [SECURITY] libidn
Message-ID: <90dee62a-dc34-f83a-7094-8e0df688d801@cygwin.com>
Date: Mon, 26 Sep 2016 15:18:00 -0000
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
X-SW-Source: 2016-09/txt/msg00064.txt.bz2

Dr. Volker,

Several security vulnerabilities have been announced for libidn, which 
are fixed in 1.33:

https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html

-- 
Yaakov