This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
[SECURITY] vorbis-tools
- From: Yaakov Selkowitz <yselkowitz at cygwin dot com>
- To: "cygwin-apps at cygwin dot com" <cygwin-apps at cygwin dot com>
- Date: Tue, 17 Feb 2015 22:42:18 -0600
- Subject: [SECURITY] vorbis-tools
- Authentication-results: sourceware.org; auth=none
David,
vorbis-tools requires a patch for CVE-2014-9640:
http://pkgs.fedoraproject.org/cgit/vorbis-tools.git/plain/vorbis-tools-1.4.0-bz1185558.patch
There are other patches in that repo that you may wish to consider
adding; at a minimum, I would recommend the patch for vcut:
http://pkgs.fedoraproject.org/cgit/vorbis-tools.git/plain/vorbis-tools-1.4.0-bz1003607.patch
TIA,
Yaakov