This is the mail archive of the
cygwin-announce
mailing list for the Cygwin project.
[SECURITY] Updated: libvorbis-1.3.6-1
- From: David Rothenberger <daveroth at acm dot org>
- To: cygwin-announce at cygwin dot com
- Date: Sat, 17 Mar 2018 14:06:58 -0700
- Subject: [SECURITY] Updated: libvorbis-1.3.6-1
- Reply-to: The Cygwin Mailing List <cygwin at cygwin dot com>
A new version of the libvorbis, libvorbis-devel, libvorbis0,
libvorbisenc2, and libvorbisfile3 packages are now available for
download.
SECURITY:
=========
Fixes CVE-2018-5146
DESCRIPTION:
============
Vorbis is a general purpose audio and music encoding format
contemporary to MPEG-4's AAC and TwinVQ, the next generation beyond
MPEG audio layer 3. Unlike the MPEG sponsored formats (and other
proprietary formats such as RealAudio G2 and Windows' flavor of the
month), the Vorbis CODEC specification belongs to the public
domain. All the technical details are published and documented, and
any software entity may make full use of the format without license
fee, royalty or patent concerns.
This package contains:
* libvorbis, a BSD-style license software implementation of
the Vorbis specification by the Xiph.Org Foundation
(http://www.xiph.org/)
* libvorbisfile, a BSD-style license convenience library
built on Vorbis designed to simplify common uses
* libvorbisenc, a BSD-style license library that provides a simple,
programmatic encoding setup interface
QUESTIONS:
==========
If you want to make a point or ask a question the Cygwin mailing list is
the appropriate place.
--
David Rothenberger ---- daveroth@acm.org