From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 121407 invoked by alias); 7 Nov 2017 23:48:42 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 121319 invoked by uid 89); 7 Nov 2017 23:48:41 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=0.1 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00,FREEMAIL_FROM,KAM_COUK,UNSUBSCRIBE_BODY autolearn=no version=3.3.2 spammy=crafted, HX-HELO:sk:localho, Zip, accelerate X-HELO: localhost.localdomain Received: from localhost (HELO localhost.localdomain) (127.0.0.1) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 07 Nov 2017 23:48:40 +0000 Reply-To: cygwin@cygwin.com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No From: David Stacey Subject: [ANNOUNCEMENT] Updated: poco-1.7.9p1-1 Reply-To: The Cygwin Mailing List To: cygwin@cygwin.com Message-Id: Date: Tue, 07 Nov 2017 23:48:00 -0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4wfPHaek6OpIV/tVYQUdYDHHi4qgdSvmdBpI3oKelihn1dsl1DCFPevlTwpr0yGY4w/HIH0/1d/e2K1teUGDN7oMHPSN8MWmfYUITkMeHZ/iKVc1OcObC0 C3SMyKzOK9x/eov76rV93df8oEZFemJQZEMsTfULlvaF7vFkUn5rtk5E4JBSzwho0hPaIUCKsQ0mtQ== X-IsSubscribed: yes X-SW-Source: 2017-11/txt/msg00155.txt.bz2 The following packages have been updated in the Cygwin distribution: * libpoco-devel-1.7.9p1-1 * libpoco49-1.7.9p1-1 * poco-1.7.9p1-1 * poco-doc-1.7.9p1-1 The POCO C++ Libraries are open source C++ class libraries that simplify and accelerate the development of network-centric, portable applications in C++. This release fixes a security vulnerability where a suitably crafted zip header could cause Poco::Zip to write to arbitrary file locations. See: https://github.com/pocoproject/poco/issues/1968 Note that users of the 'Poco::UTF32String' class should compile using the '-frepo' g++ compiler switch. Details here: https://cygwin.com/ml/cygwin/2015-04/msg00130.html Dave. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple