This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: bzip2 update please
2011/1/12 Yaakov (Cygwin/X) <yselkowitz@users.sourceforge.net>:
> On Tue, 2011-01-11 at 12:43 +0100, Reini Urban wrote:
>> Dear bzip2 maintainer (Charles),
>> 1.0.6 is required against the CVE-2010-0405 decompression attack.
>>
>> Did Yaakov overlook this? Normally he's the one bugging first.
>> clamav had a configure check for this.
>
> I did miss this one, but I'll admit that my "bugging" seems to be of
> very little help.
To the contrary. Lot of help. At least it helped me a lot.Thanks!
--
Reini
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple